<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="419">
<package pkgid="82a0e2bc47612a19a536a3cf08bc5707a124490c857a593bf44f776cd0d6729a" name="edk2" arch="src">
  <version epoch="30" ver="20220628" rel="1.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1644235200">- Create new 20220207 build for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
</package>
<package pkgid="b7b1dabdd6254cd3cd188c257335a04f731d59ab5e067843180e49b00abff949" name="edk2" arch="src">
  <version epoch="30" ver="20230821" rel="1.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1644235200">- Create new 20220207 build for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
</package>
<package pkgid="251d0211f620b3ca2d970fe55d50b336ed08b5f51572f891c32310d59c91c99c" name="edk2" arch="src">
  <version epoch="30" ver="20240227" rel="5.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
</package>
<package pkgid="c7127a777a806f801e2690c584a287565a426462ac8c625624ab8de334d216ce" name="edk2" arch="src">
  <version epoch="30" ver="20240909" rel="2.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
</package>
<package pkgid="f2b17ec0f908807251fbe8ff657c5b50281075ff0ce1aa1cbd782c5a86f2e976" name="edk2" arch="src">
  <version epoch="30" ver="20250102" rel="6.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1735819200">- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</changelog>
</package>
<package pkgid="da1f73a1937799cbde2f2686a38c086a850b1737b18fdedafcc9a31efc5083bc" name="edk2" arch="src">
  <version epoch="30" ver="20250905" rel="4.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1735819200">- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1757073600">- Create new 20250905 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access [Orabug: 38381983] {CVE-2025-3770}
- EDK2: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means [Orabug: 38382190] {CVE-2024-38805}
- EDK2: EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network [Orabug: 38382286] {CVE-2024-38797}
- EDK2:  Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. [Orabug: 38413860] {CVE-2024-36331}
- Update to OpenSSL 3.5.1 which includes the following fixed CVEs:
  {CVE-2025-4575} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-9143}</changelog>
</package>
<package pkgid="b5d5c3d3d94c671871ae70522728ea4166b7e16c4132c75810cb74b5746854a3" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20220628" rel="1.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1644235200">- Create new 20220207 build for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
</package>
<package pkgid="bd817469aceac218f667bad4a225bc81c914b6e594ce188d7c2a027adf95bb03" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20230821" rel="1.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1644235200">- Create new 20220207 build for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
</package>
<package pkgid="2fa4702f762774bd18f94999d9ecbc875db2d449683b8d9f3b8e4f0c8b89a1dc" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20240227" rel="5.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1649246400">- Create new 20220406 release for OL9 which includes the following fixed CVEs:
  {CVE-2022-0778}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1652270400">- Create new 20220511 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1654084800">- Create new 20220601 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1656417600">- Create new 20220628 release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
</package>
<package pkgid="9db8e84918c1650ea4b5469123dda79a983f812c432ad1903f03a224bc335f13" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20240909" rel="2.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
</package>
<package pkgid="d544fd6271a0d5708495a010028ed242f922d1bbc1285786868f78519260d6ff" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20250102" rel="6.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1677499200">- Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
  {CVE-2021-38578}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1686657600">- Create new 20230613.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692619200">- Create new 20230821 release for OL9 which includes the following fixed CVEs:
  {CVE-2019-14560}
- Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
  {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1692705600">- Create new 20230822.cvm release for OL9</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1735819200">- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</changelog>
</package>
<package pkgid="b5cd55c6b1e01f78139bdf116ef1fb1be9693f0a5f47f3088057df236baab90c" name="edk2-aarch64" arch="noarch">
  <version epoch="30" ver="20250905" rel="4.el9"/>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1709035200">- Create new 20240227 release for OL9 which includes the following fixed CVEs:
  {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
- Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
  {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1725883200">- Create new 20240909 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
- EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
- EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1735819200">- Create new 20250102 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
- Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
  {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}</changelog>
  <changelog author="Aaron Young &lt;aaron.young@oracle.com&gt;" date="1757073600">- Create new 20250905 release for OL9 which includes the following fixed CVEs:
- EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access [Orabug: 38381983] {CVE-2025-3770}
- EDK2: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means [Orabug: 38382190] {CVE-2024-38805}
- EDK2: EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network [Orabug: 38382286] {CVE-2024-38797}
- EDK2:  Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. [Orabug: 38413860] {CVE-2024-36331}
- Update to OpenSSL 3.5.1 which includes the following fixed CVEs:
  {CVE-2025-4575} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-12797} {CVE-2024-13176} {CVE-2024-9143}</changelog>
</package>
<package pkgid="52267375f47f5e87324ae4b0df859a54bee9a3fdb4b10aac58b80003fc978acb" name="libvirt" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="b0e3f2a56c176644fc1fbfb35fb56c7b76ccd57613cf61d8cee2ca30e5fa1a84" name="libvirt" arch="src">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="6552507f1a4227f42b1ddccd01aa4449d6469b059f8c1867a306910cf937ac51" name="libvirt" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="3d4578291d23998ff09508f97942ea059ed057cf984ddec1da12e9977102e083" name="libvirt" arch="src">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="4d4e5ccf8f61c12b6b9a22da4f968f0f93e4d7c65f17cf5d17e09711dcd82aa5" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="f3f93ab1c3ca3bf57a66df2bddcf86dfa38650317ea212ed1c9b9adbf88d18e3" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="2092b14bfb3bb1d29b81850eb66a27d6b0ac2c56f7f6513a3abe8efdeef04cc0" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="235f75db3108ea8f72849862767e4c21d8de6fa837ba3cbd94ebb5a117a20d30" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="32e3f3fa3bb1237c84ae7adb8b12f729e333b08a42b02b8d2af325af414f66fb" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="5499dab626475d1ae8326ead3cd21b1a57b845a7f2d2307e8192d360c8590a6b" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="d0e29986b887c7fca83c4f4748a14e46b60a9a16ee5d57fb68f2c6e5a420833b" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="7cb4d81d29f172d87a92b8486324ec1037e68d302c0beb38d7cc2f54d18e82d1" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="46a71efe07eda3067247e69ce6c49fd28c74e790de48d228a02bf7ac9725c4b8" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="be56277e475d26b43fe0e66eb31980b3e94a4f014519c052e60c328bbe843367" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="620b7efbcad8e017a48de7c43ae7ede90f0c5f7702949ebadd35995bf3e2f459" name="libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="147d7c08bbca5a27ca0f3b7e371696412a255ff86036039a29160cf1309cb899" name="libvirt" arch="src">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="1ef5a3794659bc3fd1b6594d62fe25ab441c280d044aafa60ade1b2a5b49e4d5" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="ee3f39227f6f02d4a4a50916b4f2ea502fc097e1a118298dca192a9ecb054db4" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="08d4ed676f52de85ab72a0635a7a52978bb4bcf42c4b178cf08c76f4b8b5142e" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="8b988e4e0cb4c7ba8927cecfaba4e504be0820212dc4594ce2b2f2c4ec5d756e" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="b050cfe034eb17269daf61d52b5b4422e3f3f315e79a4ffd17608176494c7385" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="e760dff9405165202cbabe1b8b4738f8575babb95b0ba84a7b3b4436f39d258f" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="e9d4caabec852d16aa6180248c86a90bab36e591dab0e836d2b2eb6e69a82d4c" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="e872a735b746392d39a5cc63e62c5a00927d46e681e472eea16a0fabe1158b1c" name="libvirt-client" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="eb49ebf8f674c09f497f06194c964f2648daea5de291c060b7f8821d79ac2ea7" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="6e2acb3ed3533e7c90cc97709b71eada3f5ea7c074be1f5fc2fcf0fc54d2af1c" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="dcd96ea71f56d614452849e54a01604175cbda0a18c2f511552b0df39e881397" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="47071507836bb08777d4f05bef015c0bbacfc8703ab02995756b664249e331af" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="4309d4ed4ddf0241dd941d9e6380ecde24f5f9d7722c62fb26c3e9f390820183" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="60632bd37fbb196a222d2ba72e0afa9f7898bb5e1b29e2a99267f276ab075735" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="72fc2cf11504cc247b8548d41a92d3d5997ae4913f97a383e4bf4607d58ec475" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="2c68c0608ddc47c5c6b3098f9f02571dee715e779b10e8d8781664a5a6c70408" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="ba967a7f0577daaff13f0a2a4249aa379aee1b33150445e0e619170880820b3b" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="bbea2f5606b3674cfac54c4f00cdc4ac8c206048480193c0d5f3d3d8d4c636bb" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="5b4c0fe9c8e837c5a13e874151a4ec14e55ee4219896a1ee46423cdf0dfcaea8" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="283ede476d90e0d84132e9076b8b74c8535dd2fdda4e3490576d705e259a3f1f" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="ab6b95a376640b1fc27c65c8014cf74b1c95bd6b1e32be24a98a28fbabbc793f" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="ae9cedb49628490388311cab88b4305a9e7808aaabda8581f2f276cd25125511" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="bd8ba4069936dc184b1849cd2eb2840246d8a4fb33de7e9c29eb48907ce2e4b7" name="libvirt-daemon" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="f91f3e478e83f560244a41829400442063dc6f6f9d2c946980a55e4c079f6fca" name="libvirt-daemon-common" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="e7836c09076696a02750a644f3b092b7241c85de8f9343faa245829bdcde5883" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="eb35485b15ed67ef10e79a6f8bc8b6546dac1708977936514702ce917556437c" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="e1c399494fb8ac8b6f4199c7813c09ba9b3c982fbbdfc6ded8208476938a635d" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="bec9cb4b5a60e73bbcf50252b7947217e7fa55d90875dfd71a7cf5a739e6767a" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="d5dc9c381676cf1e8e5b22c410563f52ed08338273313845d70a1fdad0256763" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="9603cb9f639890af42e9e6a5565a10b6874ad71b3eb26b2d7f0f160af91f587f" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="efffcc5d8a6559a9bc9b2e8fe2ba30cfd5940e9b32f7a5bbc7fc03bcc20714dc" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="c328744f65d359c4f663068ce8a46d98c2e2b1e9b1c76aa407cd87385fd70837" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="94cb472c25ff12cda7752272bcd8264528b97568c10bf625bac5b8c7ea007444" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="d0d7d412d02968b2c99572cb01ff29540682afda3b932f8188f5061f83caf121" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="74b226b3eab603fd5f2b7f2c0efa3b4d3b305f70a455c0fbf6ad6f8e55600127" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="bc58980d85669cdaace721ca7c3fe234db374da47950e0e072ffcdc9489462c0" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="467baa6b525750c09001ef26b51a5cbfd106ad4a0dede47802bf0e9c7dc4052a" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="53aa5f63589550ba54e2782c20f2515b04a5148b7a05f5e22cdaba59a5d5e2de" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="0527f1fb5f4de99d2ed00bf50bc67bacef3abeba18083cf852209bf188d1a365" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="b1684c1b0cf4fc73ef63d4c970c7df1842a46b034056404bb0d00e041101e375" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="6804f14a8b1443a7aa62334b966d9f246fa49b8c57c69962e9b92010a08dd1c5" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="857fa412454b428d2f03aabf5ff12ae3de2f41953fc381c03d9cb9b62a240371" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="fa3d53236c0c45f844a415d0e74a4416bc6f0c0ffcc29b89740ff9decb7c196d" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="58085d820d9ca4617254ece1fe65adb967b62c2d13d6e3f16209b68fe660b6d2" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="4a09f3f6da94353d9c5db1028208751ff87dd2787117e4c61cb82d645fc649c2" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="19396a1127241f0e8d96c43f7288d47f4e129c631f4155499fde74a4371d2948" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="4356d61b286f9b62292efe5d442c18dfb945dc51312553b3353fc4746f563963" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="8ce0b0108a0e834b8881748658915512174572630ddd00b4548af1cc19434a3f" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="c6ac046d505ff8d4a07a9c5fd248ed8bda37d0bf2c43802a626f46976e615315" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="fc0c601f7cf7db085777b346a2a8297a71d1765d1f0b53cb3123f31ef6faa176" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="2c3c6156b1c627b8b0f6a7259f6db412971f192d68d96751f480e1c098e7ba35" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="555fdd9468f069756f63b9b3fe1fe7bd796ff8c73dbdf0d42acd2da77c0d5d1e" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="bf0bec6340375c9f83c5909ddea5db4a751ee407bb612065a7d06a477ee1c85b" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="054bab2022f2c9e43cf22794b94877d44cb9890635ff1c00bd1ae217f9ba6b0b" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="5dac4682d1969f04fce2eaf64d93fd172cc5b9897e0e147bf715028e568afb24" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="91dbafb2cd274e0b9a52eb6d23a9181970ce84b25950b1355c0faa960f5c16f4" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="b682e8d4a3e788848e262541ae60873e61337e9a6a6477dc0cbf37f2b93a0839" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="14ccb6e8985126fe57d16716c5fcb958e40c26b662e6e8a408f5e43a7801cba5" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="fb7f3b050af563300376dda2f02cf50ae208e2136252926b63e67df93cabebeb" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="4cca83bd170620f6a3d5b0e5d302f9932caea7d5a7193b9942bc1489b5703d8f" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="50192106695de7d6d95182a1d26a919e5a2a70f68e3b4110c4863a97cfd726f8" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="51605b08376d91a8e8c911222227dae39189ed31a606ed04c0f7d25501a3f36a" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="d47c6d85f8bb42e8f0f9c835a6408f01bb1e68d3b567aaf1acc978da70f2740a" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="9915de40b0c427f8d65c43e13fde66860520da924573c784c40768591f1a9e3a" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="ec2077f5fdb0ca9e4aec49f5cdb18d2238e1c57bfbbc18dbe3679b8c6282f06f" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="acc99de75c85d26a126dc9bad400e36bc7557c12a1d02efd396b883ed4cde1e2" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="120b289904b4a7a1b298b9346e2888271562d4bd1868a6c5fcfb66c5591d0a91" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="77d26cc7eea1329688c900afedb59ae3d54a143e9794f1d34c6e9f88ec1bbb1e" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="d9c690987afc56f8eed7ac58b40c32eeb9ada50f59931c156083a818461af6b2" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="c2db77ea4e728d1f7062c8d3521be9c26dca1a791e5a72fd3ece834614f6e582" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="c7191637bb9fb9883d639455600394f9c77f76eaf67beeb47eedd2ff50a2047e" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="939c90c8eb539c6596aeea27f9c946971251191fe173b3f0c8a2cd5c1c4a7c0f" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="398cc1bffe5994cfbc0f97b10e92404d04d7a748af07ecffb9e0257915cfdafe" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="bf48c91fc4a52f97eaa783f909248eaaff5762aaaa57b06b035eb0a7ccd8c9ee" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="de7768419687890c64e7699375c734d0bdca9fcfe9802f13175239755e8db9cd" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="a994f37c497a4d1718e7d8d3f35d22f05f2adce49a501ade6aa28de5899267b3" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="bc2ded31253906d118ada67cb55674e05ca677ef6683bdec294f8feae749f6f9" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="6e2db4728a9332092e10b1d07e6ccdcc4cf6163e80e0b30908d0bf8b5eba1211" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="ec66c9c7fd661403c54b15aec22e81c1efdf81dc47b9c6c73c7c43fc24ec4da3" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="7ad1b4bb87d0c9a26eb2fb7e62acbbf6c2fbcecf4fe31e407ea6a42497cadff5" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="490062905226807fd689a2948826c4687f4a925d2298dc3f68563b465c670b08" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="f9f375d4adc5501ee8b9263207f9b80f2715568799f7a23507eadf9bedb60cc8" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="81657b531b22ca0652976ca4c1be6198876237dbca9c91f3906c3e360698da0f" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="250e7dde3f7845e74c60c0476edf0f66ab2293f381374f6ba0de81a9c29bce09" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="aaba88920bbe47dba2d2e61c142c9e2417589259cac3a70033de29275a8f3b8d" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="7bf6303eee7a8c19ba9b6a2cd1e58ee88e5dd816d14a9726fe7aa87a67642eb2" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="b9a9b745bf5ada67aa32845c9374a01d4c19c44d5a635e68e2b63cac13f20b99" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="8ffd281a7abb9cf306453e96ad0285bd31ba3d8843397d8acb6fd081c4f08c6f" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="e4329a373a1926edeb7560e4a509f06b3c8460f3a705e44f2587146e2904127d" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="aff01bcbb415ebc862c454eb6d8152147fe38609862d0170b1885ba1a1ee03ac" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="040046213e54714a33ffaa303d9b4dcf081f7fdaedcf8c4829a9d232cacf62c7" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="f43f400b7c5ff7576ceb5f4dbdfb31d25ad79552226104a808ff77e6e6a6f72d" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="ef9bbbfb288189701267d124c158ba18924c8fd120e755c0d2ce75c0b347f89b" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="5440c7d0ee87984e71f2f4bb021884e085e9cc6e0f382a6dc7dcb258fc1d7d14" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="c5ccbd4ddae934fb8aaf6a8d79169fbeae155399f62200f370a038be88a7432c" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="38060f9a36c2e2b480b4cef76f00a6485c56b08ba3b2d6a9a30198080da47c1f" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="f057a771676466cd6235f238da668cc1ad743b434fc30ba1127b863e1dc8661e" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="e32b5b3ed715814d7a41121912fd5ad767d624a4c5cbfdd971fada5160dc7477" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="940f4e0c1807906562c47af7e986d615c21f56d5c777877199d19c02540e8f09" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="ce5c84c7a73d9d18103e8c876dd96e8da87a780c74cbd8b98f5887ad46d2cc5d" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="cb178a46da4280cbf61488d19acefd4f88b8251e8975e70566e585fce52a223a" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="e6842036b44bc4166d2e01355f917a26f872dba9f29aee2dcbc5db9c94c1cf47" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="43f95d103f5ad8810dc84eab7a2aa3e569c6e72d9fb8d598d6fe1dc0c3fbc8fd" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="3897da43788d4de5c92d7880447ff1af56612dae71607c7286e54161a8cd4619" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="1082a28f8f394c103746ec0b258716fc2ee3faec1ecb6e719076016098ab8b2c" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="6405b7022c944f6a2f7da56e8023ea5c9c967f5867883b5ad7edf989899f23f4" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="8c01eba56b6c2e7fc8e4cc8cf341d6f2ee3ace05adcf78992d8b4a68e02abe5d" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="bd97401ab09862d286ae257f26559fcce1d64165ee1cb566673cc2aa1d884a6c" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="9b49d232267ea8906eb7b99550394bdb5939865dcb16cae542f9ff8edda2ddf7" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="5f86896a019e6f4eca5698c82518f786e99bdb0f46a770fc715a7a902c84f106" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="5b495effc2c3c461f5428937497cf241d05d902e2224c7243938e2493e7b66c7" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="32ed1578ed5456470d204226a7b87e8eeb79e1673089a517aa08ded96f4a8316" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="37108cd17ce68cb3159088bc4768b8a3ff4fe6d9570aebe4d574ea50034d75a7" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="af2181314d5ec9ff4b9b12c1d7ac7a82076c2498b6db4afbc56925c2dde84ee6" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="c5db015f1666e5789994ac815990c5aff86570fe417418003182191904537655" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="0a0425d50b2f2a111bf026aecebf498997888163dfe375c0239b1563a424e9d9" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="d29eade484d0be1211cd3e5fd81821756b1417d8a1e2cad01c40380514627b39" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="fd981969bb8c2adb95299f3987941b4ae1bcbc585568f5e5a18acf059171fd34" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="947bf70db417a87bf1b8e3ef3ee0dacf0ee91e2447974331d4b2873624ab4160" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="56eb86d3a280a7e89718439667e2b811e4fde846bbbd31d35f74f09238a5c282" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="c6fea77270902d27f945a69998a6687c683cf8b61d2c2914ee63368a484c6dad" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="72c4cb6cb8a9b0cb53827b48e848e34ca3a38aaf4b1370466148e16768fd8772" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="c417e5560c819481c501e352d62f8f31a9626554c60d39b32295287410f015f7" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="ce7cfc6c52d326d62ddda117064aa20c354a4a25ab9019f9ec6b3bebf62ad3ae" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="0ad86d2d8296b89b98cb4fd16116cef03462dbd3b06cbc3af21f37a5d9da6aee" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="a04b9bb462adf2e688ca5f7f0b4d35c8ec2fdd9862acb1b5b1ca5aed5467db5c" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="5e5e3e19ce69aa3db4466bda150dba803488c6e51087f23e97eccee61d2323b3" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="e923d6f4dc671b08386ee1a63b4eab09bb83ca2bbf90b0ad9d8f85d9d9165f9b" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="ae1f49a23c706131b0a4315e028d88bff8fee439b2b81858b181c5f35ee0c744" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="f541d4d96c024246a273db62918ff9cc40c0dfc12b197fe4fc16694f6e5d61c4" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="a5b1a71c81fc5d6126a78495cd6e0544075584ce45a7ea3bf3ce93d7998c3713" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="141d1c8cc81fa2cd0629c747fdeac11dec2bd315e0fab71eae363f4311898fc8" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="7b152d98e4d34407afcfc74dc4f81b5ab3a06ac85aaf49c28c40a073e28d1ae5" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="d0df923d9b6a098e2f68dded28c1160745c3c707ee8a1cd19465962d60a21d35" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="93715e4bcffb8e43be986cc144aa4057c74da11806df8824bc6a4b2a0922d846" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="40d977098cd24021c77674eab3f9693a03fe3c93cd65d3c276c49654f24455e8" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="e74e4869f3f1e66ee0eb8c8877dc97f48fff82a246f91636c8d4f77937e35d9b" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="b515e801f5188aa46d1b9b76f431b696075c58fa4c863d592004d5a9727109f0" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="1ba219ab250c06f163f01d0fd7779f9262e39a41a3fa5d7ede7f9dd728bf1ed8" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="291600f6a3ff05b3cfcb0f7208db6b79e437c124bf5ef428a487c5c3f5a29182" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="91fc32c1141125593f49d8e8ab23509b5fcc21273e8a755723d23b4956faa8d7" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="46ae0090e9d1e6774c703fa8b5ff644b8d4ce22e4241ecc10b2c13d7f9d9b604" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="7e35f7a8a88bb68c7a1710be933c7c382c5adb47c340382c30211a368c38e7aa" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="1274daa84d0d13c3bdfe42ba3464fa4dde081303d8c93ffca04a3444e8004541" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="bd14d168c9cc4bd3d554fda23ed3aa7d22d731c41c024743b0e4721ff03923c3" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="73c335af8dc915156b37070e281cb8ad524af4efa5703ae3fab2a6fa7b39a713" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="e6238238e6c01ebb46874d6c2364470dfbc8786efb8f5bd941eb0691b1710ccc" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="cc112e61ee4c33ae5f10f80e5a97b113a2653306fc78b45738530703a9a8d2f5" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="c64c6e5a09347838a6ab5776b8001f88bb9b5adb1015ad412f73fb4f3f4f7b70" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="23c73c114e732e14b35825a166d675bf6bf34ada4db6bb3aa3412c488daad6fc" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="c972b248b6f1e86f89cb343af81d25927efe162ca25367f8f7cbddbeff5f44e2" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="bd58a694d8a5723cc6c247708e03b4d9ea53998042420a6a47ea2829f8a9d308" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="44aed82213577da36e93e4e9715e4ecb9bbba7f31b7f54f161047695caa4a67d" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="d3d34fbf0067e78b93825036c2e5e69410679dacdddeb9fa6c890cd5c00edcb7" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="158f0d1362c08fca2177331c4989bc0b108672766ba854d558b48f7944145f00" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="9d6ecb41edf33688f1b9db6d7ef0eaaf3049e008ae84184f430b5337104b4ab5" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="e66328104aa25be0ddcaed7a5c6c5b0a4a407535b13b44a8895eeb50720591ef" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="05a2832f9300093c97e8d08b5d8ecebd95a3dc46d61197bc6a8dd76356d704f2" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="d4e964fb7488862adbfebc3dc35292f349e71cd092324beb6fa9d77426997809" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="c5cecca9515343fb9443ff69823cc05224645a443c677ee32dc8c45fed48c429" name="libvirt-daemon-kvm" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="492e38a625b57c78085f2ee306fbe7f818a3dc408e2af0ae3cba97a78e9228a5" name="libvirt-daemon-lock" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="3a424eacfae28da7761b6944e5ebaca2dd8948e439fd92777c9320ef27a34ad6" name="libvirt-daemon-log" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="c1942fc128c637ac522d6b2f9ef8fd90052e7014db493343c9372d68c7b7721c" name="libvirt-daemon-plugin-lockd" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="6bdc7132738c9551e8e29e1298a957e2400c43db72ea504e538b5abe1531d232" name="libvirt-daemon-plugin-sanlock" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="1df640a1ed1f8a895626df62e6d6ba1cdaebe27d81be3398b7320644feebf570" name="libvirt-daemon-proxy" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="b50efdb47a32e7977e20dc5d1c1d4b51a1d4f31446ff4f53edb858653da38ddd" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="9471a4f9d11930950f5ae80781e7546b6ab8a14c620139a9a7adff1e3e3a6c9f" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="8203a5ff6648ff416223c8a47265e5baa50212d270f9a45edcbb7390cf89b57b" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="6a00c95cea2af3cebd8cfa3ab5b2a4fb9201c39acdedca5dcf6772baa25e3a32" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="d8e45d71031be8d83d39f37572690748071d117029344cd139c487828431f6c3" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="382d5d427ed823599ef5cc1844fe935ce8ebf8b5d6f306152d71332eeb5dad63" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="028a72d7770e97eee37768e9421bbf8252f942652cff5259d031fbdf5e73b1ad" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="1a608277d3a5f3cc67c80e141d23dba0fb9e5448507ea567c63acfbae3741d2c" name="libvirt-devel" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="39aeeae4192d957b327cfeb1f2b36f0b6a2545fd4f419c51c77852d1cceeee69" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="759c3372be6b9ff49253b132bf7791a900608b11b07108dfa4d880faf1372430" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="9971d002e8c851d84663df8c7e16e08381e0f656feaad862e31daba6b8c3c931" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="dc555ff7a30eab3c731685a8dbfcbd301d349ace7be209d9b4b59f17aa111e49" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="e2208d05148c74cacc8708ab57322371e3005604db7c1612e24261709ef15d58" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="4d18fc655b0025ddbbaad6539b3ad9ce24d85570ade7d80293c0d15b319db0c8" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="1f49672b5a88080cb565a341b8cc49213b1076588b22a3194abe967371536071" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="039b21082126ca522fed1b3d5e03a12c4817e1823b8b7656a2519e10720da494" name="libvirt-docs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="31f9ae7c1bbe937d04a2fb27f011e280c8aa38c841f1559d0c9b0af1bf64e9a1" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="aa151c02b6695cdd3f3321a0758e2d836c60bcf7f882237e0b3314aee4cbf0bd" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="94912f9673c81eee1db636b06799fae7e5a7f79f1def77dc4afa50f202863515" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="bb47cfa7050c1ee4924c3a7b30f909b86b8836e7643cb70d06353d62128afe6b" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="8ea435c8b30e1a83b2cc6d98371d7780c423deb2ac6bee2c2fcd93d31882ec5d" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="6fecb3f3c6090eb8bc19f07f4a0bb2e5429a64c4f64503bf59db73dd447671b3" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="709f55c47fac74e60a975e829023d27d776aee1ab84f54e69e1c74373221e471" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="09d06aa578dd204fa3bded9da0d2890a5abfd36a1d680ac2378186ce349faca7" name="libvirt-libs" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="6d3cdccc7f3d5c92b0cc2655fa93c611f2bf33c3981437d7499dcd0ddf11a311" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="3547c2f61f704b2473f0412efba65674f9bc647915f778ada2a3c69ccad6d9af" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="e664e31fff76e20fb06de8d3d56cb23e94dd3f8cbcf0a9f4d29bdc08b261ecc7" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="d30de1e7153be1c748812bba9c1b464ec37a3abbd70fee70392f173a95344536" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="adb6a4eaac3f872a7a0c81af35cf84cd4b9a0b044d55a6d8366df7e2b5c60761" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="4fa3606aebd1c970eb2cfbe9b7979d76b414a907d1778fb7e150e597c1f30047" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="614bcb89997d77fdd73f13fc3b27d4bc1180558ccad2736b9bf6bda08502f3a3" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="df84ae4eb6e9c471e501956ea9f64f513c5746a2b527394130ce73af7e67b523" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="9e72e7cc675ec5c2c817fa3a3ab5f0659ebc89a4a197561e6271b2e7f8b34fe6" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="6250716e6ba62ef4bec8c57e35a49fb0860d1e20041c07eadaa6fd3dd0675647" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="675a6b9acc5776087b5e843b95ba9ab6a5dc57de1ed8f9f166eecf8e2bc5f9eb" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="4cde067f42fa741ab58f238c25c3e0296ab47a50d45d61cc496f9a3b43dfa9cb" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="ca78795d82fb493145f80fdab85472f7a393709a0a53fc8976e93e87dd84e54d" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="939ce00975213c9e2743fb457bfa33e006dbfd7d90275c5ec1bb3a38ab8dc266" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="3e0866c0954e65cf89d6c3c6304eab636ef0a9eebac38aba9bb0dc82029753a0" name="libvirt-nss" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="159c9c7391c19627c0fe463777b833264eab63264d5da63bf0c20d62e473cff8" name="libvirt-python" arch="src">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- Update to libvirt 9.0.0-11 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Update to libvirt 9.0.0-12 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- Update to libvirt 9.0.0-13 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- Update to libvirt 9.0.0-14 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- Update to libvirt 9.0.0-15 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770292800">- Update to libvirt-python 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update to libvirt 12.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- Update to libvirt 12.0.0-4 (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- Update to libvirt 12.0.0-5 (Mark Kanda)</changelog>
</package>
<package pkgid="42b94d04b9ab9df2c818a7b5f20c705b0dd2b2c87ed662d127ffff689db0501e" name="libvirt-python" arch="src">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="7231345892458fe2488a965723f04a548a39fb5455cc47949ed3f93568fbf8ec" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- Update to libvirt 9.0.0-10 (Karl Heubaum)</changelog>
</package>
<package pkgid="4938b409b1819add3a4fa0eb854e834f422a9ed1117207a54e6b3bd2b23b47e0" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- Update to libvirt 9.0.0-10 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- Update to libvirt 9.0.0-11 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Update to libvirt 9.0.0-12 (Karl Heubaum)</changelog>
</package>
<package pkgid="77d7dcacf15acc78fcdcb39cb12bdddccf6b9d91ae26666a067f3f1680c8ae80" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
</package>
<package pkgid="c798105da172aafa6814adde0c0342aa4b896828e595994afe571c992eaaeab0" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
</package>
<package pkgid="9e4b6c60fe002def65d7b25ded253dd5e707efe8f968d6e5681ebe360cbf0b3e" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
</package>
<package pkgid="d852cada722f1660ddf3abefb18eae40b13e6d4011b482cc6d50ebea382dbd7d" name="libvirt-python" arch="src">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
</package>
<package pkgid="9b1ba4d296bdd452689056a2661a0fee8a44c2ef0847ccb0151c119cd2d8bde5" name="libvirt-ssh-proxy" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="39da043d5b52627d040081c0076571cbf0ff6d937f93ec736e766ed099b666e2" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- qemu: fix switchover-ack regression for old qemu (Jon Kohler) [Orabug: 38408711]
- qemu: add support for qemu switchover-ack (Jon Kohler) [Orabug: 38408711]
- qemu: Add support for optional migration capabilities (Jiri Denemark) [Orabug: 38408711]
- qemu: Document qemuMigrationParamsFlagMapItem fields (Jiri Denemark) [Orabug: 38408711]
- qemu: Rename remoteCaps parameter in qemuMigrationParamsCheck (Jiri Denemark) [Orabug: 38408711]
- qemu: Use C99 initializers for qemuMigrationParamsFlagMap (Jiri Denemark) [Orabug: 38408711]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- MASH up various tests that lead to imperfections (Wim ten Have) [Orabug: 38325535]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Move validation check out of postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't explicitly set the secure-boot feature (Andrea Bolognani) [Orabug: 38325535]
- qemu: Automatically add firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't drop firmware type/features information (Andrea Bolognani) [Orabug: 38325535]
- conf: Don't format firmware type/features when migrating (Andrea Bolognani) [Orabug: 38325535]
- conf: Remove some firmware validation checks (Andrea Bolognani) [Orabug: 38325535]
- qemu: Always go through firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Discard requires-smm firmware when loader.secure=no (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareMatchesPaths() (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware descriptor masking test (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more tests for manual Secure Boot configuration (Andrea Bolognani) [Orabug: 38325535]
- tests: Add firmware-auto-efi-loader-path (Andrea Bolognani) [Orabug: 38325535]
- tests: Fix firmware-auto-efi-loader-path-nonstandard (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename a few firmware tests (Andrea Bolognani) [Orabug: 38325535]
- news: Document support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- news: Document changes to firmware autoselection (Andrea Bolognani) [Orabug: 38325535]
- docs: Document firmware format attribute (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add support for QCOW2 format firmware (Andrea Bolognani) [Orabug: 38325535]
- conf: Accept QCOW2 firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Propagate firmware format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Filter firmwares based on format (Andrea Bolognani) [Orabug: 38325535]
- drivers: Reject unsupported firmware formats (Andrea Bolognani) [Orabug: 38325535]
- conf: Parse firmware format (Andrea Bolognani) [Orabug: 38325535]
- conf: Change handling for empty NVRAM path (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuFirmwareEnsureNVRAM() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move qemuDomainNVRAMPathFormat() to qemu_firmware (Andrea Bolognani) [Orabug: 38325535]
- qemu: Move firmware selection from startup to postparse (Andrea Bolognani) [Orabug: 38325535]
- conf: Export virDomainDefOSValidate() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add descriptors for QCOW2 format firmware builds (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware with unsupported format (Andrea Bolognani) [Orabug: 38325535]
- qemu: Don't pick firmware that requires SMM when smm=off (Andrea Bolognani) [Orabug: 38325535]
- qemu: Clear os.firmwareFeatures after autoselection (Andrea Bolognani) [Orabug: 38325535]
- qemu: Only fill nvramTemplate for local sources (Andrea Bolognani) [Orabug: 38325535]
- qemu: Add convenience local variables (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefNew() (Andrea Bolognani) [Orabug: 38325535]
- conf: Introduce virDomainLoaderDefParseXMLLoader() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefBootPostParse() (Andrea Bolognani) [Orabug: 38325535]
- qemu: Introduce qemuDomainDefMachinePostParse() (Andrea Bolognani) [Orabug: 38325535]
- tests: Add more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Enable qemuxml2xml for more firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Unify input files for firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Move firmware tests to CAPS_LATEST (Andrea Bolognani) [Orabug: 38325535]
- tests: Use x86_64 for all x86 firmware tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Rename firmware-manual-efi-rw* tests (Andrea Bolognani) [Orabug: 38325535]
- tests: Set nvramDir in qemuxml2xmltest (Andrea Bolognani) [Orabug: 38325535]
- docs: Fix documentation for loader.stateless attribute (Andrea Bolognani) [Orabug: 38325535]
- Revert "conf: Fix migration in some firmware autoselection scenarios" (Wim ten Have) [Orabug: 38325535]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- qemu: domain: Fix logic when tainting domain (Peter Krempa) [Orabug: 38669211]
- resctrl: Account for memory bandwidth of 0 being valid (Martin Kletzander) [Orabug: 38264014]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770120000">- Update to libvirt 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39115400]</changelog>
</package>
<package pkgid="111dd87af9a79da53a7747a15a78c428887b47233085d862ecd9ec58722a98cc" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="d79701f9e2f2015b46ac12e1de88562b1702860ab465246d9aedb016da835b25" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
</package>
<package pkgid="68560bda340ddeeedb002dacb0f8f5fa8cab6f23c61949eb837a8e9682ee83c0" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- cpu_map: Fix SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Install SierraForest description file (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add SierraForest CPU model (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x491 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x490 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48F (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48E (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48D (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48C (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x48B (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x485 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing vmx features from MSR 0x480 (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "pbrsb-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "psdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "fbsdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "sbdr-ssdp-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "mcdt-no" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "cmpccxadd" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-vnni-int8" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ne-convert" (Tim Wiederhake) [Orabug: 37296073]
- cpu_map: Add missing feature "avx-ifma" (Tim Wiederhake) [Orabug: 37296073]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- cpu_map: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37845537]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Clean up resources on vhost-scsi hot plug/unplug (Joshua Brown) [Orabug: 38028900]</changelog>
</package>
<package pkgid="4f3e85a2b7fa74cd65963c1282a6aaf5f10af2c38465ed692c6b4455e0027837" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-1.el9" date="1643371200">- Update to libvirt 7.10.0 (Wim ten Have)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
</package>
<package pkgid="ddf88c378bdb2faccb4640f387a9e535d2c1ef9a3a4b4df8655eb0751553fc19" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.10.0-2.el9" date="1649851200">- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
</package>
<package pkgid="35db368d6791f9baa275162860f4c5533ea03a68a4537ad534a0b738a6f6bf79" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
</package>
<package pkgid="cdcde241655f0ab5a0e630b0539b4bb7b1ed2816389da69b216be7b836b8aee0" name="libvirt-wireshark" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722427200">- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrangé) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about "max_client_requests" in single-threaded daemons (Peter Krempa) [Orabug: 36422853]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37098750]
- conf: Fix migration in some firmware autoselection scenarios (Andrea Bolognani) [Orabug: 37024703]
- cpu_map: Add SapphireRapids CPU model (Lin Yang)
- cpu_map: Add missing feature "fsrc" (Tim Wiederhake)
- cpu_map: Add missing feature "fsrs" (Tim Wiederhake)
- cpu_map: Add missing feature "fzrm" (Tim Wiederhake)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1728907200">- qemu: Add x-orcl-dirty-bitmap-devices measure mode (Joao Martins) [Orabug: 37097510]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- qemu: conf: Set default vCPU hot plug/unplug timeout to 30s (Karl Heubaum) [Orabug: 37249230]</changelog>
</package>
<package pkgid="2ec9924600f868678eaa972d5e2d44dc50679026e2ee544fb35b14058cf7ee43" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="12.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- Update to libvirt 9.0.0-11 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Update to libvirt 9.0.0-12 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-13.el9" date="1757419200">- Update to libvirt 9.0.0-13 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-14.el9" date="1762171200">- Update to libvirt 9.0.0-14 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-15.el9" date="1764763200">- Update to libvirt 9.0.0-15 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-1.el9" date="1770292800">- Update to libvirt-python 12.0.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 12.0.0-3.el9" date="1770984000">- Update to libvirt 12.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-4.el9" date="1774008000">- Update to libvirt 12.0.0-4 (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 12.0.0-5.el9" date="1774353600">- Update to libvirt 12.0.0-5 (Mark Kanda)</changelog>
</package>
<package pkgid="7c2af4599a763b5d47707a1b6d0c9ebe7ca0b65636ee58f9cecbcc49c736fd3d" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="7.10.0" rel="2.el9"/>
</package>
<package pkgid="b1d052d077d76513ebbc083880dd500d57bb2c5b40e718880323d81e2e716a98" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="10.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- Update to libvirt 9.0.0-10 (Karl Heubaum)</changelog>
</package>
<package pkgid="3b7aa97347393efa618358493c4d0b460c9e55070245481b8ae5974030a7966a" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="12.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-10.el9" date="1736769600">- Update to libvirt 9.0.0-10 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-11.el9" date="1746705600">- Update to libvirt 9.0.0-11 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-12.el9" date="1749816000">- Update to libvirt 9.0.0-12 (Karl Heubaum)</changelog>
</package>
<package pkgid="ca3f2f358adbf2170eb902ba295ce86da62bcdb0d04444bc4194b124bce3d2b4" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="4.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
</package>
<package pkgid="e139825b894c666f1b6b6ec11f6105ad6c369f99253f7ae8f091e399ebda17ea" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="5.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
</package>
<package pkgid="b1517d3475470a2fe85a2198cf5d45f12d851d543f37fd50e5fc6b2f76287f3f" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
</package>
<package pkgid="70e79a6593cbf334e3ed943fd822925bb6c0311fb7755ccf70838dd65158fc8f" name="python3-libvirt" arch="aarch64">
  <version epoch="30" ver="9.0.0" rel="9.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-1.el9" date="1675166400">- Update to libvirt 9.0.0-1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-2.el9" date="1689249600">- Update to libvirt 9.0.0-2 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-3.el9" date="1692360000">- Update to libvirt 9.0.0-3 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-4.el9" date="1698408000">- Update to libvirt 9.0.0-4 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-5.el9" date="1709812800">- Update to libvirt 9.0.0-5 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-6.el9" date="1722513600">- Update to libvirt 9.0.0-6 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-7.el9" date="1727784000">- Update to libvirt 9.0.0-7 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-8.el9" date="1729080000">- Update to libvirt 9.0.0-8 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 9.0.0-9.el9" date="1730894400">- Update to libvirt 9.0.0-9 (Karl Heubaum)</changelog>
</package>
<package pkgid="e7d4575c2e44c6b9e69160cc9885116604e387ae8669bb67480fffe0479dd336" name="qemu-guest-agent" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="1278d9435f0001548056049ce7cfec78f0d383a74714fe811a02d53fd565e505" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="91ee945f77b2d311e88bcfd18c75851e5053abcd2d9744268ec7454c26758d11" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="7447488520e9504e8a600918532fdce8d572ca0d23c3b211bbe648d8977b85ce" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="cc57092a59cc7b4b58c9fa2f29e1f73e6bca800ce02517fbfffdefde37e08f2d" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="6b7594c5939a4efc476471af952bc80cab2fd3237068f0955d3bfaf430ba609d" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="7df7b49f620f8724bc55776015a669148aa67e46a08462bc8efdfe3be47a042a" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="38630b3297279bee934980df7794c8fa89e2cd517b2ae6d3c9d26a6b3fb7b955" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="9fad8ccbbb4f59185b2c5d20e7eee01b658453201cf70d25c6adced9a7a3084e" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="546227713dd62462a62978d4a7de1630a55ef3aac3eca4243a256c074c5506d9" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="a40e80da52b75351989c0287d97370a70988b971d83c0899633127abfd884c98" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="b349c529c9b30f5bd06abd170314d8b0330f9dc5af3afc38c50ab354ccb511fd" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="acb3e53c93aacbe866fc41c07e04c67f1c90efc4098980a9a9070a697f636c7e" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="11b342fca829920aed6a3259d25590d7dc6b454e8e27cf94e62b8538c71b12d8" name="qemu-guest-agent" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="932ba66573c5ed47dc9ae5f9d5cf5a207f173369656cda44e44b5b86f7afb210" name="qemu-img" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="cdf9355b91cf6074ea220de2e28853d019082acb9fb5f5b588a486c851cacc9d" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="f3f335f4b82b3ebb369fd5036088719f6851996682bb2acb7e3c04edb5a64e07" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="983d85eb0c7fb6652a677fb42669db8599dcd68fe5908448b4d7a76ba6d42c83" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="2ed594b470249b1a570498a1766a750a1ff706d02ec399acaf7e54a4f9360ce9" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="dfe63eb6a5662072746f2bc806d01135d7dd88d46adac7bf8bacf1826f9053c4" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="93277c64cecd846a7c6fcbb724b271630612f82fb008d135097c106d94d77f6c" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="a1e3a4b9ef0a1842c6fa9ad5ac901a0798f90fe396a3894e2f55b28a0c4dd99f" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="6103ca1a64e6cd39ba56a8ca103acf3f4b964312a869f40bdc5d2a30068265a2" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="30b44962b5e0ca7565763b762587a9a038a60b425231adeaf52a1e8b38035340" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="1234eaacb853094f0706545fcf314dea521a5a20902a5b19f6ac1a986fcfdafb" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="7aefe2d4b3248e20101c34fb737270b4c215ac7858735e50cb0d78048aeade07" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="ead652ccd520610454ca61e0bcaa440b9251bbe6c527eef00bbbb9894b0e553b" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="a47f823a40ec9fa46309cd855c76a4da62eb628ca660270b4530f86638daeb28" name="qemu-img" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="4b389cf293734289f4d531b4cdfdee34c8ce8c1951545672c91e45aecfaf36cd" name="qemu-kvm" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="f604198701c72d51a11b23d3f664da36bea270fd72d09799d424c67370b620d3" name="qemu-kvm" arch="src">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="4b7452b1fce3b29d47b7148ebf8ddbd0492340f5232c4b65a0ff732cccc37ada" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="addf8ec983de53a261e0f4cabd2d01a2f5c4868ec408f0a69f2f362030c8b700" name="qemu-kvm" arch="src">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="6b8b5f96a736ed8e477dad8e47027f428616fa78f41b277e783c521b12525d29" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="aad1c3dc5ff8e694786286faeb282bff40f25feb8d937652edc5c48273390b61" name="qemu-kvm" arch="src">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="7903f1119c5627f95e563d4106fcc1c8e024b0a4c7d26a545f26f79b794f058e" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="32f86ebe66c31010e7429ad489f16abd622a80a5a8d5710a63691f20edd7927e" name="qemu-kvm" arch="src">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="b21c3fa2a7cdd6701389e8f2575fe298c4729c9aa3bdfd61f20f1fe9bafa85a5" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="7bc4933f9db19765cbd9b5e38db41c99f53dd21ecb712f61dc7ef7cf92847220" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="5719386c2caf539a3795dce60125387cd33fa565e97c9e9ef1f10d920a84bde7" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="1555680bcbee8dcf1d1ede06928fedaa4b5b2dd933a51410c4532fc0557184d6" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="686fe076bd4daade88a63bff3d13ca556d187671d5bb1fe0ba91ecaff71a560a" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="946bd53ecdaf38e0d579e21a8fa1b34c78dd6ad9c124554bd70c7bac50d7f376" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="2cd079ab0723d0dace7785b6a8ed9a09bbb410ec292fd0bbeb833f36584705c2" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="4bb1a40a6006c6000e75d47e521954b9a3b85f345d25281fbac537db6343a397" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="327d7047841036629d637934957a955274136bf2fac0d3ee088f28b53a62a591" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="29be86995da430de0e6e8369390486f46ad1b3ee678914d46c482ca390ffb842" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="a00392e5117bf00e5c9995c30d748c23cdfe86911221b2cb1896d92192510049" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="b91fe6a511a43a603ed118ddf71f4da8278be04c73e8c4d34f8c16875e7c9c53" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="249828a80580d0d3e52f8653ef58e9dc846bb1d8b449ddf4d9aee66d735b1542" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="fd5ae78506f933e01e305dbbb055931cd9ec9328cd3b873f799c95600fb2e2d4" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="e83f3e05de38a12145f6e00d4a38b25b0a22b7cb7eebfaee568eb461e1232438" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="d9a651acd71bcacdaabf9ccbf83cc266aa36262edb8f92f44b57ea8d5e1e658d" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="731dd011abb2526c40c0102bc91131b27da4b09c9c9638bcb8db189d8c0b5486" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="2f048f7e58e5c4fa2806972f4e599a41d79840759f081c3ae245034bb4f6870f" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="00c0d8031ff4a5fc2cd15cd340908262c0f3db560b5c6dde550a28396859aac3" name="qemu-kvm" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="1b909da54016580692a50d1293181f6dd2e2fb20b9b7178c03554cb6ae65d7c0" name="qemu-kvm" arch="src">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="31487e0424a2d82cfeeb219d0e4908eb0411634e44dd49a1607973cfaefdc441" name="qemu-kvm-audio-dbus" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="9c81fba65a9d566681df2d5d86fc387331250113d221e2179b1d48c98a444f55" name="qemu-kvm-block-blkio" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="45ebbd9aaeb0d9b418f27a550dade4172a36ad61ce47367e1d3f6d196967e9f6" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="798f3daeec4c34c6bfcc15d1e8c1af0b2962ae60b2abd4d5c954d6236bbf4df8" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="2586bcd499ab4f3aa3d855f3946b1bb877f99988deaf912908c832ab2067e883" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="7c7914290da3073b3c7c6213de2d59d2ed9e42749d4f8749cf058079aa0ceed4" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="67107be47854ade28abc04b539dc9c21ace51e712ab99d95e47681a91bb729ac" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="dd6db7d71f94d76e9b57bd61c5a7a7172ba30150cc17cef808f882b0169cc3dd" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="fc4a80e2fab8ff954e1c55dee31359cb5d55702ccd701756b5a3a3fb60b92839" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="0c68d12e049222eb7d26747b19a7af694fe72ad2367334c3145a559b52c6b05c" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="10d56b1a54872f02120bcd850c8faa074fe38cc6e06f5f298554cd972e468a38" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="f68a9926275a67c62ac974a3e955450dde01c14b8da22e4cc82a21c76fb70cb0" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="7f63c9f9bf4f2ca55d0d3488bf392346a9ab60396b63fe5265a6023ccbd03ee3" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="81ad2018f9e6769c23a200e1f6723c388e8d78a2757b7629f27aaa719e054c10" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="86a0cb728bce45e07f95a641033a19530f47d5b6a8ec32431354a1a937d7f5f1" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="b260eecb3efdd27a843e7f10cc05f82f20f16c218c6d1d1e83e79c2043dc5a0b" name="qemu-kvm-block-curl" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="d4bc6c645f1c8f5fde4657136003a9ded8537ee96a634e9c5e017177f91a0b8f" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="9bca1bb273381d8c5c15015b06a87b6e36c4311f5db809dc4e57b228b5859bef" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="c1a052a04efcfe5552fa094b8f885499f86f7c178640b7e762c8ffa43e00a973" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="3838d6c864dede651c878a6027ab9b6bede4165106dbb68de31321c8b42597b1" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="5b9571229ad842c9dce6173c67076576abf6a13c2de126575c4e83ff515c0f43" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="50e39d605cd3efe1fcebe0a4d98cf9329f680ca18e07f148a9de81531d288f1e" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="890f7c49d20852ea1ac666d6f3b9ea460573ed05de37841d01b13d6634ffedca" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="a3358066789340827fd69e565c27ce52eab14e998ea10a01c5c190da7a18d802" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="85a0302714f2139efc9d19a045f94337d9dab14481f18606047550d5c45c2219" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="1f275d079622c96f856b2b716e0749a2ac85940609799b4e6181dc1d6ed31adf" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="23c11419e254f9dc902d390525f8bb56ac386bc38c0dc174aa3abbe44d26959a" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="f0542f480ede05b099ddb1258ebe709076acade43b0a4e9df1b3a896a59e2131" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="085861cc72570b755c9b1e084776480a237a50d1f77a7face14013fdf4029c38" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="5ded064b6294f465e45591183b8943c3a742c226c2708d9df3dd3a588a92c467" name="qemu-kvm-block-iscsi" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="f3e9d279a54487a0f6bf7c66559fbaa2694b5dcf663ba90ef7db15666c07892d" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="91ae486e3380feac4d5aafd2a6cf51522397b6c6a3e6f9fde83e2047806624a6" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="1f6cea7ffbae7339e1a262e52316e35e2a9ed3a71fa6eacada04754b46bc9219" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="b5fb0de814d0ee8fdb7456c4ab1d020ea33b15fa1d3a9c91894b733c3b748e82" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="56aec3f1825de27de008d56450821ad49acd466271dbd2a4ab2539ed15d6ec35" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="964bc61db33d28c9eb2ee513b76791d5de1c9415fbacf018424d5ccd0e783a97" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="f8c868f32aa2d11bdea1c3043e017e9f482a2460ea568607ccdd62c50689392c" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="d8eb0388ee5cd60ac08c7f65bf1d549399a9ada866f5ca55519f9c2f2a7d2db6" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="db8476e0b014faf2935c5dd2b79480c3e0180e9c9a23fea374ba7c33f8743897" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="fb9a9cad4a1d29dd5742fb10e7b839a7fb0ec6195d51f164fa4c58ff08a4bab4" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="ee5daa7f7e5558284c11d9709cfffa29fc3a64ec06c958bc077e1f949b0934d7" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="acf015bdd6e993ab5d340e8e22d4ba776d1365202951b53a64e9fe2f7d027411" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="f5e654de01c51f0c478952719b04a64d32991cf44f6514751011401f16ebe6d7" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="425cc001efcc6b831ee0d77349181d77a3d3b028c1ec164ce706f34401263034" name="qemu-kvm-block-rbd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="db684e7303f3bcdbe26696469b85f3c102455039d75cff151276caee58c321fb" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="fe2b842da6f6f19022a182545458367669c3b745ca1bcb215719695e7e9897ba" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="aba6dfbaba7297539d636e55fab048e245499745141b31acc4467baa638cd0ea" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="64fb3c8bb7c8cf7bda2c7d0608e8967f3947ade0a1a29dbad4657c44f352081c" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="f15de2c566eadd912938983f6e9bbe8c15a1fdf8d2fd6a9f3cb434d13e1e0288" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="55e438f6bad873461386c0c73b6af37a9aca43e8079e18d76769bf09751d5e69" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="9a516efa7e830a90ccee89eec048cff362707c88f07f3d57c28e21073fcaccc9" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="7c8d722df1f754329e4a23f1933a0be984e9d56b672ef240131dcc26c3e70e37" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="5846068436700c1ac3216c42064834a05214fb28b4954ae60657dc51dc4c9369" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="ee9ddbd5d4cd94843ca3b41c6401431f25e03acdc4e416de21f6a5935fe1ecec" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="696a41b87a52cbd1f0ca1b89031175bd78d1b96581489c95d1fe318e99242a16" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="e7a44c4931ecde26088008fbdd4442040b3911df3997112aabb20213e4fe8530" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="010f0291d5f2044e6d1a5897e6f92af58914568a84c6d786e23eccee0f45c542" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="bb3c3f7e637e98868206d1aa2690bbe863ee529dfe08e4236e959441522e11a0" name="qemu-kvm-block-ssh" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="03cb7320fe214f37bcb6fcc1f54950d9deccfd41f7d4c244e784ca7d42b045c1" name="qemu-kvm-common" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="b49c4fbeab4363fd345fbb13fa9158edb8159ef5715fae386d67c1511da4237d" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="2a9bfe84cef4ca93e75230d90cabceb7da00a3ddca33fb359bcfd060ec1cda79" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="03b62313dc15cdb39a41b86cb18771355f15ae42d3d5ec4919027687a392f4e9" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="8ea47429794c36403f19e4e11c0e10d5ea3dfe40faf9489faf200119d225ccd3" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="ce70ef29ad91f0d6814d307fcd1d015361d908037a28d2046f4342212ef4ba04" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="c41f776bd1564a8dba9163a0d6d7cd80e8e61ee77bc6d320a1b37148712e1b05" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="dc30c5fa17b2647a658c9538d9a65bf68d93f59117e8d0e3c6784f9f01647bd8" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="fc3028006fcd901e0a06bb58da21a5fb2c1cadeda3fb5c8ec3253e89147fae16" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="5fd481438349dc43a69e5202860a6197cbccb4e37aecd421ef9c528d7e765850" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="abf4514ccb52209180c48a49653ff34f5e0c64100f5dd70550d0b150b3e476b2" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="6bc3c2e1b01eacb8a301396fde7d581080871c19918df910d15f96af04951612" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="a19c889142e4379dd637eaafc29fc03a4f0408abf19a6fe37f0f9055556b473b" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="08a14a0e12cb9c19be059cb8b665adcf0c4d49b3f680d35fc63cd01a20f4f893" name="qemu-kvm-common" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="642716c3b1c313472933063901f7ce949dabe777484d321ec193a0cbe6a62df8" name="qemu-kvm-core" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="8bc977ab869088bbdcfcfaa137f4c44c08b5b42c2f9555ac54ef85c62f9f00b0" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="f30bcdb3c4566339910f1690b3bf18a5be1607f08d16e5f6b0cb412838080020" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="ad514b777d660d4446cdf3c288a5cf512a3e798db19bb7f4e6e0dec166c925f3" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="bb7baf84241778eb4ef6ca224fc9ff7ed186ec7c849699aac90087fc06c7693f" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="746e6c4526a9ec7f5ce82df4538c56861ad9252376d0578420a186caef8fbe6d" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="03dba945c6674723f4ff7a58dacb52a031b9f939359a38f936142fadee5c1d36" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="a5ddac1efa7a4509475ddad534066f47dfee378f1d5d9d03f81af9e5043685cb" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="c9d9fb26e34e57d1a01a156fec9bb40d8a1cc1d0be0506f0aba1b01957a82198" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="e462a5ffe6f72013718f0069f2d3134f0439aee7995a1d36509e18875eb4b8c9" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="bc423eeb9f0b4f59f839fd5d993e942d6a8d2625b0892347a547a7699f8b5e80" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="437ab3d634ee2e8e24f912cf4a49f602503249385495c77a79a77888ceffbc46" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="accd3a1386531368826a7a1d9af5639d1680608ac203f2581739b612fbcf6a5b" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="49f5730d3ec277ccab0fb2b1b3e4fbb53a66789bfabc62591a2c58695d89cfa7" name="qemu-kvm-core" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="936081db63e08fc1d99ecb8c544a05dc30294b5eacbfced99467f2f639d68441" name="qemu-kvm-device-display-virtio-gpu" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="0bb6da3fd3fa202db71284575839b7f11f7adcb66b65a2ce0ad5f681c67cd997" name="qemu-kvm-device-display-virtio-gpu-pci" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="c8dd7e248a2ef7cc5548acc533f22c5b8a502112cdba459ddd24a70ae100e48a" name="qemu-kvm-device-usb-host" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="cd1d1f31e92a8023fc6c20041b851fb4394638cf6a86f9c65b211f5b90f0f3aa" name="qemu-kvm-docs" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="23cddfd6b90bf03576eefeeb7542416162d620dd31d4b5b221965c6160419e73" name="qemu-kvm-tools" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="813f8ad55107feda9973ce65ac774451743e6d58225385992303e661ed17b948" name="qemu-kvm-ui-dbus" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="1336a17c181a6b94f077b2664844a105ddb4101988403346bb911863d77e3504" name="qemu-pr-helper" arch="aarch64">
  <version epoch="32" ver="10.1.4" rel="3.el9"/>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-28.el9" date="1757419200">- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.0-1.el9" date="1757937600">- Update for QEMU 10.1.0.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.1-1.el9" date="1759924800">- Update for QEMU 10.1.1.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.2-1.el9" date="1760961600">- Update for QEMU 10.1.2.</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-1.el9" date="1765368000">- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env-&gt;priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.3-2.el9" date="1770724800">- Update epoch value (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 10.1.4-1.el9" date="1770984000">- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env-&gt;quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-2.el9" date="1774008000">- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 10.1.4-3.el9" date="1774353600">- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]</changelog>
</package>
<package pkgid="3c5a45d3ce5be66bba45fca4ef13c020792bebf7ec168fc261ee950c953fd556" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="3.el9"/>
</package>
<package pkgid="d48572043709fc35fe71869c9aabb596bbb31b28bd030f39e9b25dbcb74d55a6" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="4.el9"/>
</package>
<package pkgid="11d0ffe687f903df828702bd3472bf7144a9d394dfe16e86357d26a50d821ee6" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="6.1.1" rel="6.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-12.1.el8" date="1638446400">- Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
- hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
- hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
- hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
- pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
- qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
- i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
- uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
- usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
- hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
- e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
- MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
- target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
- ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
- KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
- ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
- ACPI: Build Hardware Error Source Table (Dongjiu Geng)
- ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
- docs: APEI GHES generation and CPER record description (Dongjiu Geng)
- hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
- acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
- block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
- block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-13.el8" date="1639569600">- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1-14.el8" date="1640174400">- scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
- scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
- scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
- scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
- scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
- scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
- scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
- scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
- scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 4.2.1.15.el8" date="1642593600">- qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
- Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
- hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
- lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
- tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
- target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
- target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
- target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
- target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
- target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
- target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
- target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-5.el9" date="1675857600">- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)-&gt;async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-6.el9" date="1683547200">- Update changelog (Karl Heubaum) [Orabug: 35343538]
- ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538]
- ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538]
- CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544}
- virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723]
- KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527]
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290]</changelog>
</package>
<package pkgid="004918a22c9b1b5b32d7c60dfec0467b15655fa481bb3f906d406fb5bd0f6637" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="11.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
</package>
<package pkgid="d09b037e21e6f0fb66fe8bfa5b59f0062aafc81a19c69a59fa40eccf34fd29f6" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="13.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
</package>
<package pkgid="6bd22df90bd7ba601c61156bbe12c86cd852ea43e2d3824b0ba99628f709506c" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="15.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
</package>
<package pkgid="94baf3356483543601697ef7313361db5068f8cdf47095c78cffef8181f69963" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="17.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
</package>
<package pkgid="6a0f70dfd58a48f144e6b7b16ccca157d5c1876cb7c6c8cf1ea2fcdf41e312ed" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="18.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-7.el9" date="1701950400">- vfio/common: Probe type1 iommu dirty tracking support (Joao Martins) [Orabug: 36024839]
- vfio/common: Allow disabling device dirty page tracking (Joao Martins) [Orabug: 36024839]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
</package>
<package pkgid="fc75c9ff70ed3604b6da5a3eff84df088b5d10b24685c4b9859b9ff504b7e01b" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.1.el9" date="1698926400">- Rebuild QEMU 7.2.0-2 with OL9.3 (Karl Heubaum)</changelog>
</package>
<package pkgid="e189939320ffcbb4b5025102ba3c3331ec7d3b0425924fc65ef4815f0f205473" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="2.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-1.el9" date="1645790400">- ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
- ACPI ERST: bios-tables-test testcase (Eric DeVolder)
- ACPI ERST: qtest for ERST (Eric DeVolder)
- ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
- ACPI ERST: build the ACPI ERST table (Eric DeVolder)
- ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
- ACPI ERST: header file for ERST (Eric DeVolder)
- ACPI ERST: PCI device_id for ERST (Eric DeVolder)
- hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
- acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
- Update to QEMU 6.1.1 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
</package>
<package pkgid="44fa39fd071c34ad0a1d61d5eff086e4c346c1417c2728d0c864ee5b13808805" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="23.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-11.el9" date="1709812800">- vfio/migration: Add a note about migration rate limiting (Avihai Horon) [Orabug: 36329758]
- vfio/migration: Refactor vfio_save_state() return value (Avihai Horon) [Orabug: 36329758]
- migration: Don't serialize devices in qemu_savevm_state_iterate() (Avihai Horon) [Orabug: 36329758]
- ui/clipboard: add asserts for update and request (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- ui/clipboard: mark type as not available when there is no data (Fiona Ebner) [Orabug: 36323175] {CVE-2023-6683}
- virtio-net: correctly copy vnet header when flushing TX (Jason Wang) [Orabug: 36154459] {CVE-2023-6693}
- esp: restrict non-DMA transfer length to that of available data (Mark Cave-Ayland) [Orabug: 36322141] {CVE-2024-24474}
- vhost: Perform memory section dirty scans once per iteration (Si-Wei Liu)
- vhost: dirty log should be per backend type (Si-Wei Liu)
- net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 35644197] {CVE-2023-3019}
- lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 33774027] {CVE-2021-3750}
- memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 33774027] {CVE-2021-3750}
- hw/acpi: propagate vcpu hotplug after switch to modern interface (Aaron Young)
- migration: Fix use-after-free of migration state object (Fabiano Rosas) [Orabug: 36242218]
- kvm: Fix crash due to access uninitialized kvm_state (Gavin Shan) [Orabug: 36269244]
- migration: Avoid usage of static variable inside tracepoint (Joao Martins)
- migration: Add tracepoints for downtime checkpoints (Peter Xu)
- migration: migration_stop_vm() helper (Peter Xu)
- migration: Add per vmstate downtime tracepoints (Peter Xu)
- migration: Add migration_downtime_start|end() helpers (Peter Xu)
- migration: Set downtime_start even for postcopy (Peter Xu)
- hv-balloon: implement pre-Glib 2.68 compatibility (Maciej S. Szmigiero)
- hw/i386/pc: Support hv-balloon (Maciej S. Szmigiero)
- qapi: Add HV_BALLOON_STATUS_REPORT event and its QMP query command (Maciej S. Szmigiero)
- qapi: Add query-memory-devices support to hv-balloon (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) hot-add support (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol driver (hv-balloon) base (Maciej S. Szmigiero)
- Add Hyper-V Dynamic Memory Protocol definitions (Maciej S. Szmigiero)
- memory-device: Drop size alignment check (David Hildenbrand)
- memory-device: Support empty memory devices (David Hildenbrand)
- memory,vhost: Allow for marking memory device memory regions unmergeable (David Hildenbrand)
- memory: Clarify mapping requirements for RamDiscardManager (David Hildenbrand)
- memory-device,vhost: Support automatic decision on the number of memslots (David Hildenbrand)
- vhost: Add vhost_get_max_memslots() (David Hildenbrand)
- kvm: Add stub for kvm_get_max_memslots() (David Hildenbrand)
- memory-device,vhost: Support memory devices that dynamically consume memslots (David Hildenbrand)
- memory-device: Track required and actually used memslots in DeviceMemoryState (David Hildenbrand)
- stubs: Rename qmp_memory_device.c to memory_device.c (David Hildenbrand)
- memory-device: Support memory devices with multiple memslots (David Hildenbrand)
- vhost: Return number of free memslots (David Hildenbrand)
- kvm: Return number of free memslots (David Hildenbrand)
- vhost: Remove vhost_backend_can_merge() callback (David Hildenbrand)
- vhost: Rework memslot filtering and fix "used_memslot" tracking (David Hildenbrand)
- virtio-md-pci: New parent type for virtio-mem-pci and virtio-pmem-pci (David Hildenbrand)
- migration/ram: Expose ramblock_is_ignored() as migrate_ram_is_ignored() (David Hildenbrand)
- virtio-mem: Skip most of virtio_mem_unplug_all() without plugged memory (David Hildenbrand)
- softmmu/physmem: Warn with ram_block_discard_range() on MAP_PRIVATE file mapping (David Hildenbrand)
- memory-device: Track used region size in DeviceMemoryState (David Hildenbrand)
- memory-device: Refactor memory_device_pre_plug() (David Hildenbrand)
- hw/i386/pc: Remove PC_MACHINE_DEVMEM_REGION_SIZE (David Hildenbrand)
- hw/i386/acpi-build: Rely on machine-&gt;device_memory when building SRAT (David Hildenbrand)
- hw/i386/pc: Use machine_memory_devices_init() (David Hildenbrand)
- hw/loongarch/virt: Use machine_memory_devices_init() (David Hildenbrand)
- hw/ppc/spapr: Use machine_memory_devices_init() (David Hildenbrand)
- hw/arm/virt: Use machine_memory_devices_init() (David Hildenbrand)
- memory-device: Introduce machine_memory_devices_init() (David Hildenbrand)
- memory-device: Unify enabled vs. supported error messages (David Hildenbrand)
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467] (Thomas Huth) [Orabug: 35808564] {CVE-2023-42467}
- tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}
- hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 35977245] {CVE-2023-5088}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-13.el9" date="1718625600">- vfio/migration: Enhance VFIO migration state tracing (Avihai Horon)
- vfio/migration: Don't emit STOP_COPY VFIO migration QAPI event twice (Avihai Horon)
- vfio/migration: Emit VFIO migration QAPI event (Avihai Horon)
- qapi/vfio: Add VFIO migration QAPI event (Avihai Horon)
- migration/multifd: solve zero page causing multiple page faults (Yuan Liu) [Orabug: 36727051]
- multifd: Add the ramblock to MultiFDRecvParams (Lukas Straub) [Orabug: 36727051]
- migration: Fix qmp_query_migrate mbps value (Fabiano Rosas) [Orabug: 36727104]
- migration: Allow user to specify available switchover bandwidth (Peter Xu) [Orabug: 35636284]
- migration/dirtyrate: Fix precision losses and g_usleep overshoot (Andrei Gudkov) [Orabug: 36727091]
- Use new created qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- softmmu: Create qemu_target_pages_to_MiB() (Juan Quintela) [Orabug: 36727091]
- migration/calc-dirty-rate: replaced CRC32 with xxHash (Andrei Gudkov) [Orabug: 36727063]
- migration/multifd: Enable multifd zero page checking by default. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement ram_save_target_page_multifd to handle multifd version of MigrationOps::ram_save_target_page. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Implement zero page transmission on the multifd thread. (Hao Xiang) [Orabug: 34131170]
- migration/multifd: Add new migration option zero-page-detection. (Hao Xiang) [Orabug: 34131170]
- migration: Make ram_save_target_page() a pointer (Juan Quintela) [Orabug: 34131170]
- migration: Yield bitmap_mutex properly when sending/sleeping (Peter Xu) [Orabug: 34131170]
- migration/multifd: Add a synchronization point for channel creation (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Unify multifd and TLS connection paths (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup into migration thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Move multifd_send_setup error handling in to the function (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Remove p-&gt;running (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Optimize sender side to be lockless (Peter Xu) [Orabug: 34131170]
- migration/multifd: Join the TLS thread (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Fix MultiFDSendParams.packet_num race (Peter Xu) [Orabug: 34131170]
- migration/multifd: Stick with send/recv on function names (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_load_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Cleanup multifd_save_cleanup() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rewrite multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_send_pages() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Change retval of multifd_queue_page() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Split multifd_send_terminate_threads() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Forbid spurious wakeups (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move header prepare/fill into send_prepare() (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_prepare_header() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move trace_multifd_send|recv() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Move total_normal_pages accounting (Peter Xu) [Orabug: 34131170]
- migration/multifd: Rename p-&gt;num_packets and clean it up (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop pages-&gt;num check in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Simplify locking in sender thread (Peter Xu) [Orabug: 34131170]
- migration/multifd: Separate SYNC request with normal jobs (Peter Xu) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.normal[] array (Peter Xu) [Orabug: 34131170]
- migration/multifd: Postpone reset of MultiFDPages_t (Peter Xu) [Orabug: 34131170]
- migration/multifd: Remove MultiFDPages_t::packet_num (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Drop MultiFDSendParams.quit, cleanup error paths (Peter Xu) [Orabug: 34131170]
- migration/multifd: multifd_send_kick_main() (Peter Xu) [Orabug: 34131170]
- migration/multifd: Fix leaking of Error in TLS error flow (Avihai Horon) [Orabug: 34131170]
- migration/ram: Merge save_zero_page functions (Fabiano Rosas) [Orabug: 34131170]
- migration/ram: Move xbzrle zero page handling into save_zero_page (Fabiano Rosas) [Orabug: 34131170]
- migration/multifd: Stop setting p-&gt;ioc before connecting (Fabiano Rosas) [Orabug: 34131170]
- migration: Centralize BH creation and dispatch (Fabiano Rosas) [Orabug: 34131170]
- migration: Add a wrapper to qemu_bh_schedule (Fabiano Rosas) [Orabug: 34131170]
- migration: Remove transferred atomic counter (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() (Juan Quintela) [Orabug: 35636284]
- migration: migration_rate_limit_reset() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- migration: migration_transferred_bytes() don't need the QEMUFile (Juan Quintela) [Orabug: 35636284]
- multifd: reset next_packet_len after sending pages (Elena Ufimtseva) [Orabug: 35636284]
- multifd: fix counters in multifd_send_thread (Elena Ufimtseva) [Orabug: 35636284]
- migration/multifd: Compute transferred bytes correctly (Juan Quintela) [Orabug: 35636284]
- migration: check for rate_limit_max for RATE_LIMIT_DISABLED (Elena Ufimtseva) [Orabug: 35636284]
- migration: Use the number of transferred bytes directly (Juan Quintela) [Orabug: 35636284]
- qemu_file: Use a stat64 for qemu_file_transferred (Juan Quintela) [Orabug: 35636284]
- migration: set file error on subsection loading (Marc-André Lureau) [Orabug: 35636284]
- migration: Receiving a zero page non zero is an error (Juan Quintela) [Orabug: 35636284]
- migration/multifd: Stop checking p-&gt;quit in multifd_send_thread (Fabiano Rosas) [Orabug: 35636284]
- migration/multifd: Clarify Error usage in multifd_channel_connect (Fabiano Rosas) [Orabug: 35636284]
- multifd: cleanup the function multifd_channel_connect (Li Zhang) [Orabug: 35636284]
- migration/multifd: Unify multifd_send_thread error paths (Fabiano Rosas) [Orabug: 35636284]
- migration: Non multifd migration don't care about multifd flushes (Juan Quintela) [Orabug: 35636284]
- migration: fix RAMBlock add NULL check (Dmitry Frolov) [Orabug: 35829153]
- migration: We don't need the field rate_limit_used anymore (Juan Quintela) [Orabug: 35636284]
- migration: Use migration_transferred_bytes() to calculate rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Add a trace for migration_transferred_bytes (Juan Quintela) [Orabug: 35636284]
- migration: Move migration_total_bytes() to migration-stats.c (Juan Quintela) [Orabug: 35636284]
- qemu-file: Remove total from qemu_file_total_transferred_*() (Juan Quintela) [Orabug: 35636284]
- migration: Move rate_limit_max and rate_limit_used to migration_stats (Juan Quintela) [Orabug: 35636284]
- qemu-file: Account for rate_limit usage on qemu_fflush() (Juan Quintela) [Orabug: 35636284]
- migration: Don't use INT64_MAX for unlimited rate (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make rate_limit_used an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: make qemu_file_[sg]et_rate_limit() use an uint64_t (Juan Quintela) [Orabug: 35636284]
- migration: We set the rate_limit by a second (Juan Quintela) [Orabug: 35829153]
- migration: A rate limit value of 0 is valid (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make ram_control_save_page() use accessors for rate_limit (Juan Quintela) [Orabug: 35636284]
- qemu-file: Make total_transferred an uint64_t (Juan Quintela) [Orabug: 35636284]
- qemu-file: No need to check for shutdown in qemu_file_rate_limit (Juan Quintela) [Orabug: 35636284]
- migration: Document all migration_stats (Juan Quintela) [Orabug: 35636284]
- multifd: We already account for this packet on the multifd thread (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_bytes_last_sync atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_pages_rate atomic (Juan Quintela) [Orabug: 35636284]
- stat64: Add stat64_set() operation (Paolo Bonzini) [Orabug: 35636284]
- multifd: Only flush once each full round of memory (Juan Quintela) [Orabug: 35636284]
- migration: Make find_dirty_block() return a single parameter (Juan Quintela) [Orabug: 35636284]
- migration: Simplify ram_find_and_save_block() (Juan Quintela) [Orabug: 35636284]
- multifd: Protect multifd_send_sync_main() calls (Juan Quintela) [Orabug: 35636284]
- multifd: Create property multifd-flush-after-each-section (Juan Quintela) [Orabug: 35636284]
- multifd: Fix the number of channels ready (Juan Quintela) [Orabug: 35636284]
- migration: Rename normal to normal_pages (Juan Quintela) [Orabug: 35636284]
- migration: Rename duplicate to zero_pages (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_count atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make downtime_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make precopy_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make dirty_sync_missed_zero_copy atomic (Juan Quintela) [Orabug: 35636284]
- migration: Make multifd_bytes atomic (Juan Quintela) [Orabug: 35636284]
- migration: Update atomic stats out of the mutex (Juan Quintela) [Orabug: 35636284]
- migration: Merge ram_counters and ram_atomic_counters (Juan Quintela) [Orabug: 35636284]
- migration/multifd: correct multifd_send_thread to trace the flags (Wei Wang) [Orabug: 35636284]
- ram: Document migration ram flags (Juan Quintela) [Orabug: 35636284]
- migration: Calculate ram size once (Juan Quintela) [Orabug: 35636284]
- multifd: Fix a race on reading MultiFDPages_t.block (Zhenzhong Duan) [Orabug: 35636284]
- migration: Use atomic ops properly for page accountings (Peter Xu) [Orabug: 35636284]
- migration: Export ram_release_page() (Juan Quintela) [Orabug: 35636284]
- migration: Export ram_transferred_ram() (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_count fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- multifd: Create page_size fields into both MultiFD{Recv,Send}Params (Juan Quintela) [Orabug: 35636284]
- migration: Fix migration_channel_read_peek() error path () (Avihai Horon) [Orabug: 36726827]
- migration/multifd: Remove error_setg() in migration_ioc_process_incoming() (Avihai Horon) [Orabug: 36726827]
- migration: Refactor migration_incoming_setup() (Avihai Horon) [Orabug: 36726827]
- migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 36726827]
- io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 36726827]
- hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (hilippe Mathieu-Daudé) [Orabug: 36575206] {CVE-2024-3447}
- block: lock AioContext in bdrv_replace_child_noperm() when in non-coroutine context (Mark Kanda) [Orabug: 36514180]
- hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36637684]
- target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607747]
- qemu_init: increase NOFILE soft limit on POSIX (Fiona Ebner) [Orabug: 36416389]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
</package>
<package pkgid="ee4e0ef2a6ae603eedadd52fa7a13cff3e6fbd981496d8dbc250e8366300ce38" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="26.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-15.el9" date="1722427200">- migration: abort on destination if switchover limit exceeded (Elena Ufimtseva)
- migration: introduce strict switchover SLA (Elena Ufimtseva)
- migration: add error to MigrationIncomingState (Elena Ufimtseva)
- migration: Set migration status early in incoming side (Fabiano Rosas)
- tests/qtest: migration: Use migrate_incoming_qmp where appropriate (Fabiano Rosas)
- tests/qtest: migration: Add migrate_incoming_qmp helper (Fabiano Rosas)
- tests/qtest: migration: Expose migrate_set_capability (Fabiano Rosas)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Add migration_has_device_state_support() (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Convert multifd_send_pages::next_channel to atomic (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration: Add load_finish handler and associated functions (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_{begin,end} handlers (Maciej S. Szmigiero)
- migration/multifd: Zero p-&gt;flags before starting filling a packet (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate,complete_precopy}_started trace events (Maciej S. Szmigiero)
- hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe Mathieu-Daudé) [Orabug: 36869694] {CVE-2024-3446}
- pcie_sriov: Validate NumVFs (Akihiko Odaki) [Orabug: 36314082] {CVE-2024-26327}
- hw/nvme: Use pcie_sriov_num_vfs() (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- pcie: Introduce pcie_sriov_num_vfs (Akihiko Odaki) [Orabug: 36314111] {CVE-2024-26328}
- qcow2: Don't open data_file with BDRV_O_NO_IO (Kevin Wolf) [Orabug: 36801853] {CVE-2024-4467}
- target/i386: drop AMD machine check bits from Intel CPUID (Paolo Bonzini) [Orabug: 36785079]
- target/i386: pass X86CPU to x86_cpu_get_supported_feature_word (Paolo Bonzini) [Orabug: 36785079]
- migration: prevent migration when VM has poisoned memory (William Roche) [Orabug: 35533097]
- i386: Add support for overflow recovery (John Allen) [Orabug: 34691766]
- i386: Add support for SUCCOR feature (John Allen) [Orabug: 34691766]
- i386: Fix MCE support for AMD hosts (John Allen) [Orabug: 34691766]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-16.el9" date="1727784000">- block: fix failing assert on paused VM migration (Andrey Drobyshev) [Orabug: 37106834]
- migration/multifd: Fix rb-&gt;receivedmap cleanup race (Fabiano Rosas) [Orabug: 36932320]
- migration/savevm: Remove extra load cleanup calls (Fabiano Rosas) [Orabug: 36932320]
- migration: fix switchover abort termination paths (Elena Ufimtseva) [Orabug: 36932320]
- nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Close stray clients at server-stop (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Drop non-negotiating clients (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: CVE-2024-7409: Cap default max-connections to 100 (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd/server: Plumb in new args to nbd_client_add() (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- nbd: Minor style and typo fixes (Eric Blake) [Orabug: 36921582] {CVE-2024-7409}
- scsi-disk: Always report RESERVATION_CONFLICT to guest (Kevin Wolf)
- scsi-disk: Add warning comments that host_status errors take a shortcut (Kevin Wolf)
- scsi-block: Don't skip callback for sgio error status/driver_status (Kevin Wolf)
- scsi-disk: Use positive return value for status in dma_readv/writev (Kevin Wolf)
- target/i386: Add new CPU model SierraForest (Tao Su)
- target/i386: Add few security fix bits in ARCH_CAPABILITIES into SapphireRapids CPU model (Lei Wang)
- target/i386: Add new bit definitions of MSR_IA32_ARCH_CAPABILITIES (Tao Su)
- target/i386: Allow MCDT_NO if host supports (Tao Su)
- target/i386: Add support for MCDT_NO in CPUID enumeration (Tao Su)
- target/i386: Adjust feature level according to FEAT_7_1_EDX (Tao Su)
- target/i386: Export MSR_ARCH_CAPABILITIES bits to guests (Pawan Gupta)
- target/i386: Add support for PREFETCHIT0/1 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-NE-CONVERT in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-VNNI-INT8 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AVX-IFMA in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for AMX-FP16 in CPUID enumeration (Jiaxi Chen)
- target/i386: Add support for CMPCCXADD in CPUID enumeration (Jiaxi Chen)
- i386: Add new CPU model SapphireRapids (Wang, Lei)
- target/i386: KVM: allow fast string operations if host supports them (Paolo Bonzini)
- target/i386: add FZRM, FSRS, FSRC (Paolo Bonzini)
- spec: disable keyutils (Mark Kanda) [Orabug: 36903731]
- meson.build: Make keyutils independent from keyring (Thomas Huth) [Orabug: 36903731]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-17.el9" date="1729080000">- target/i386: add feature bits for Inception/SRSO mitigations (Mark Kanda) [Orabug: 37170148]
- hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37176213]
- hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37176213]
- migration/dirtyrate: Add new mode to dirty track non KVM device separately (Joao Martins) [Orabug: 37097510]
- vfio/migration: Allow dirty tracking reports with MIGRATION_STATUS_NONE (Joao Martins) [Orabug: 37097510]
- migration: Emit event when source starts switchover (Joao Martins) [Orabug: 37097503]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-18.el9" date="1736769600">- tests: acpi: update expected blobs (Igor Mammedov) [Orabug: 37274182]
- cpuhp: make sure that remove events are handled within the same SCI (Igor Mammedov) [Orabug: 37274182]
- tests: acpi: whitelist expected blobs (Igor Mammedov) [Orabug: 37274182]
- target/i386: Reset TSCs of parked vCPUs too on VM reset (Maciej S. Szmigiero) [Orabug: 37318424]
- 9pfs: fix regression regarding CVE-2023-2861 (Christian Schoenebeck) [Orabug: 37409273]
- virtio-net: Ensure queue index fits with RSS (Akihiko Odaki) [Orabug: 36943011] {CVE-2024-6505}
- qemu-kvm.spec: pack elf2dmp tool (Annie Li)
- test: bios-tables-test: add IVRS changed binary (Bui Quang Minh) [Orabug: 35710551]
- amd_iommu: Fix kvm_enable_x2apic link error with clang in non-KVM builds (Sairaj Kodilkar) [Orabug: 35710551]
- amd_iommu: Check APIC ID &gt; 255 for XTSup (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Send notification when invalidate interrupt entry cache (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Use shared memory region for Interrupt Remapping (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Add support for pass though mode (Suravee Suthikulpanit) [Orabug: 35710551]
- amd_iommu: Rename variable mmio to mr_mmio (Suravee Suthikulpanit) [Orabug: 35710551]
- hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb() (Peter Maydell) [Orabug: 35710551]
- amd_iommu: report x2APIC support to the operating system (Bui Quang Minh) [Orabug: 35710551]
- hw/i386/amd_iommu: Do not use SysBus API to map local MMIO region (Philippe Mathieu-Daudé) [Orabug: 35710551]
- amd_iommu: Fix APIC address check (Akihiko Odaki) [Orabug: 35710551]
- hw/i386/amd_iommu: Factor amdvi_pci_realize out of amdvi_sysbus_realize (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Set PCI static/const fields via PCIDeviceClass (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Move capab_offset from AMDVIState to AMDVIPCIState (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Remove intermediate AMDVIState::devid field (Philippe Mathieu-Daudé) [Orabug: 35710551]
- hw/i386/amd_iommu: Explicit use of AMDVI_BASE_ADDR in amdvi_init (Philippe Mathieu-Daudé) [Orabug: 35710551]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-20.el9" date="1746619200">- Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
- target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
- target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
- migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
- iotests: Disable ones that hang (Maciej S. Szmigiero)
- vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
- vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
- vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
- migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
- vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
- vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
- vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
- vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
- vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
- vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
- vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
- migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
- migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
- migration/multifd: Make MultiFDSendData a struct (Peter Xu)
- migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
- migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
- migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
- migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
- migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
- migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
- error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
- migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
- migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
- migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
- thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
- thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
- thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
- migration: Check migration error after loadvm (Fabiano Rosas)
- migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
- migration/multifd: Terminate the TLS connection (Fabiano Rosas)
- io: Add a read flag for relaxed EOF (Fabiano Rosas)
- io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
- crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
- io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
- crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
- migration/multifd: Fix compat with QEMU &lt; 9.0 (Fabiano Rosas)
- vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
- vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
- migration/ram: Add load start trace event (Maciej S. Szmigiero)
- migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
- migration/multifd: Replace multifd_send_state-&gt;pages with client data (Fabiano Rosas)
- migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
- migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
- migration/multifd: Remove total pages tracing (Fabiano Rosas)
- migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
- migration/multifd: Replace p-&gt;pages with an union pointer (Fabiano Rosas)
- migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
- migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
- migration/multifd: Remove pages-&gt;allocated (Fabiano Rosas)
- migration/multifd: Inline page_size and page_count (Fabiano Rosas)
- migration/multifd: Reduce access to p-&gt;pages (Fabiano Rosas)
- migration/multifd: Decouple recv method from pages (Fabiano Rosas)
- migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
- migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
- migration: Introduce migrate_has_error() (Peter Xu)
- test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
- Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
- Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
- Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
- Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
- Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
- Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
- Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
- Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
- Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
- target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
- target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
- vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
- vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
- linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
- system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
- system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
- qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
- target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
- vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-21.el9" date="1747396800">- migration: Temporarily re-enable our custom switchover event by default (Maciej S. Szmigiero)</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-22.el9" date="1749816000">- migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
- migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-23.el9" date="1750852800">- vhost-scsi: support VIRTIO_SCSI_F_HOTPLUG (Dongli Zhang) [Orabug: 38113473]</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-24.el9" date="1751976000">- Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
- target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}</changelog>
  <changelog author="Mark Kanda &lt;mark.kanda@oracle.com&gt; - 7.2.0-26.el9" date="1754481600">- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]</changelog>
</package>
<package pkgid="d7ec7b0a98f96c487fe64d8ebd0f3498a488303e57031aac8ddeddca39452ebf" name="qemu-virtiofsd" arch="aarch64">
  <version epoch="30" ver="7.2.0" rel="6.1.el9"/>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-2.el9" date="1646827200">- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
- qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
- block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-3.el9" date="1649419200">- acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
- tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
- hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
- hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 6.1.1-4.el9" date="1663070400">- display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
- ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
- vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
- Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
- vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
- kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
- kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
- virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
- vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
- vhost-vdpa: backend feature should set only once (Si-Wei Liu)
- vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
- vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
- virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
- virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
- virtio: fix the condition for iommu_platform not supported (Halil Pasic)
- vdpa: Make ncs autofree (Eugenio Perez)
- vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
- hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
- vhost-vdpa: stick to -errno error return convention (Roman Kagan)
- vdpa: Add dummy receive callback (Eugenio Perez)
- vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
- vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
- vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
- vhost: Rename last_index to vq_index_end (Eugenio Perez)
- net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
- vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
- vhost-vdpa: multiqueue support (Jason Wang)
- virtio-net: vhost control virtqueue support (Jason Wang)
- vhost: record the last virtqueue index for the virtio device (Jason Wang)
- virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
- vhost-net: control virtqueue support (Jason Wang)
- net: introduce control client (Jason Wang)
- vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
- vhost-vdpa: prepare for the multiqueue support (Jason Wang)
- vhost-vdpa: classify one time request (Jason Wang)
- vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
- vdpa: Check for iova range at mappings changes (Eugenio Perez)
- vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
- net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
- net/vhost-user: Fix device compatibility check (Kevin Wolf)
- net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
- memory: Name all the memory listeners (Peter Xu)
- vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
- vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
- vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
- vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
- vhost_net: do not assume nvqs is always 2 (Jason Wang)
- vhost: use unsigned int for nvqs (Jason Wang)
- vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
- vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
- vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
- vhost: correctly detect the enabling IOMMU (Jason Wang)
- virtio-pci: implement iommu_enabled() (Jason Wang)
- virtio-bus: introduce iommu_enabled() (Jason Wang)
- hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
- vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
- target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-1.el9" date="1675080000">- vl: Add an -action option to override MCE handling (Mark Kanda)
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
- migration: increase listening socket backlog (Elena Ufimtseva)
- virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
- Update to QEMU 7.2.0 (Karl Heubaum)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-2.el9" date="1683547200">- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-3.el9" date="1684411200">- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-4.el9" date="1689249600">- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-5.el9" date="1692360000">- virtio-crypto: verify src&amp;dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.el9" date="1697630400">- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]</changelog>
  <changelog author="Karl Heubaum &lt;karl.heubaum@oracle.com&gt; - 7.2.0-6.1.el9" date="1698840000">- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)</changelog>
</package>
</otherdata>