# changelog

author: Danilo de Paula <ddepaula@redhat.com> - 1.3.15-7
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1725959
    (Ensure modular RPM upgrade path [rhel-av-8.0.1])


author: Cole Robinson <crobinso@redhat.com> - 1.18.0-2
changelog:
  - Fix rdma deps and don't restrict archs
  - Add --disable-werror to fix gcc8 build (bz #1556044)
  - Spec file cleanups (bz #1483290)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 1.18.0-5.el8
changelog:
  - libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
  - libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
  - libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
  - libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
  - libiscsi-avoid-fallthrough.patch [bz#1634541]
  - libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
  - Resolves: bz#1634541
    (Fix important coverity issues (libiscsi))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> -
changelog:
  - libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
  - Resolves: bz#1597942
    (Qemu-kvm fails to connect to iscsi LUN by IPV6 address)


author: Paul Howarth <paul@city-fan.org> - 1.8.0-1
changelog:
  - Update to 1.8.0
    - Added a basic dockerised test suite
    - crypto: Add support for the mbedTLS backend
    - See RELEASE-NOTES for details of bug fixes


author: Paul Howarth <paul@city-fan.org> - 1.8.0-5
changelog:
  - scp: Do not NUL-terminate the command for remote exec (#1489736, GH#208)
  - Make devel package dependency on main package arch-specific
  - Drop EL-5 support
    - noarch sub-packages always available now
    - Drop legacy Group: and BuildRoot: tags
    - Drop explicit buildroot cleaning
    - %{__isa_bits} always defined now


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-7.el8_0.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Danilo de Paula <ddepaula@redhat.com> - 1.8.0-8.1
changelog:
  - Rebuild all virt packages to fix RHEL's upgrade path
  - Resolves: rhbz#1725216
    (Ensure modular RPM upgrade path [rhel-av-8.1.0])


author: Jiri Denemark <jdenemar@redhat.com> - 5.0.0-3
changelog:
  - vshtabletest: indent strings with expected output (rhbz#1676354)
  - vsh-table: allow empty columns (rhbz#1676354)
  - virsh: introduce ninfos variable in cmdDomFSInfo (rhbz#1676354)
  - virsh: rename ret to rc in cmdDomFSInfo (rhbz#1676354)
  - virsh: do not access uninitialized memory in cmdDomFSInfo (rhbz#1676354)
  - virsh: introduce 'ret' in cmdDomFSInfo (rhbz#1676354)
  - virsh: do not report error on zero filesystems in cmdDomFSInfo (rhbz#1676354)
  - virsh: use virBufferTrim in cmdDomFSInfo (rhbz#1676354)
  - virsh: allow empty targets in cmdDomFSInfo (rhbz#1676354)
  - util: fix memory leak in virFirewallDInterfaceSetZone() (rhbz#1672340)
  - internal: introduce a family of NULLSTR macros (rhbz#1662849)
  - virsh: fix snapshot list --parent (rhbz#1662849)
  - network: explicitly allow icmp/icmpv6 in libvirt zonefile (rhbz#1672340)


author: Jiri Denemark <jdenemar@redhat.com> - 5.0.0-8
changelog:
  - cpu_x86: Do not cache microcode version (CVE-2018-12127, CVE-2018-12130, CVE-2018-12126, CVE-2019-11091)
  - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12130, CVE-2018-12126, CVE-2019-11091)
  - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12127, CVE-2018-12130, CVE-2018-12126, CVE-2019-11091)
  - cpu_map: Define md-clear CPUID bit (CVE-2018-12127, CVE-2018-12130, CVE-2018-12126, CVE-2019-11091)


author: Jiri Denemark <jdenemar@redhat.com> - 5.0.0-9
changelog:
  - Revert "qemu: emit error when trying to update blkiotune group_name in qemuDomainChangeDiskLive" (rhbz#1601677)
  - qemu: introduce CHECK_STREQ_NULLABLE in qemuDomainDiskChangeSupported (rhbz#1601677)
  - qemu: error out on attempt to change blkiotune group name (rhbz#1601677)
  - util: skip RDMA detection for non-PCI network devices (rhbz#1398111)
  - admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
  - locking: restrict sockets to mode 0600 (CVE-2019-10132)
  - logging: restrict sockets to mode 0600 (CVE-2019-10132)
  - resctrl: Do not calculate free bandwidth for MBA (rhbz#1686274)
  - resctrl: Set MBA defaults properly (rhbz#1686274)
  - resctrl: Fix testing line (rhbz#1686274)
  - virresctrl: fix MBA memory leak (rhbz#1686274)
  - virresctrl: Sort resctrl array correctly in virResctrlMonitorGetStats() (rhbz#1686274)
  - tests: Add capabilities data for QEMU 4.0.0 x86_64 (rhbz#1614127)
  - conf: Set net->model earlier (rhbz#1614127)
  - conf: Add virDomainNetIsVirtioModel (rhbz#1614127)
  - qemu: Move <memballoon> validation out of qemu_command.c (rhbz#1614127)
  - qemu: Move <rng> validation out of qemu_command.c (rhbz#1614127)
  - qemu: command: Make vhost-scsi device string depend on address (rhbz#1614127)
  - qemu: command: Convert vhost-{vsock, scsi} to qemuBuildVirtioDevStr (rhbz#1614127)
  - conf: Add virDomainDeviceSetData (rhbz#1614127)
  - qemu: command: Make BuildVirtioDevStr more generic (rhbz#1614127)
  - qemu: command: Add qemuCaps to BuildVirtioStr (rhbz#1614127)
  - qemu: capabilities: Add virtio/vhost {non-}transitional (rhbz#1614127)
  - conf: Add <disk model='virtio-{non-}transitional'/> (rhbz#1614127)
  - qemu: Support disk model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support interface model=virtio-{non-}transitional (rhbz#1614127)
  - conf: Add <hostdev model='virtio-{non-}transitional'/> (rhbz#1614127)
  - qemu: Support hostdev model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support rng model=virtio-{non-}transitional (rhbz#1614127)
  - conf: Add <filesystem model='virtio-{non-}transitional'/> (rhbz#1614127)
  - qemu: Support filesystem model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support memballoon model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support vsock model=virtio-{non-}transitional (rhbz#1614127)
  - conf: Add <input model='virtio-{non-}transitional'/> (rhbz#1614127)
  - qemu: Support input model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support virtio-serial controller model=virtio-{non-}transitional (rhbz#1614127)
  - qemu: Support scsi controller model=virtio-{non-}transitional (rhbz#1614127)
  - tests: domcaps: Add qemu 4.0.0 test case (rhbz#1614127)
  - qemu: domcaps: Report disk <enum name="model"> (rhbz#1614127)


author: Jiri Denemark <jdenemar@redhat.com> - 5.0.0-10
changelog:
  - qemu: process: Improve documentation of values handled by qemuProcessHandleAcpiOstInfo (rhbz#1660410)
  - qemu: process: Handle all failure values for dimms in qemuProcessHandleAcpiOstInfo (rhbz#1660410)
  - virfile: Detect ceph as shared FS (rhbz#1690702)
  - virfile: added GPFS as shared fs (rhbz#1690702)
  - nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691352)
  - vircpuhost: Add support for reading MSRs (rhbz#1648273)
  - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1648273)
  - qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1648273)
  - qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1648273)
  - util: Add virHostCPUGetTscInfo (rhbz#1648273)
  - conf: Report TSC frequency in host CPU capabilities (rhbz#1648273)
  - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1648273)
  - cpu_x86: Probe TSC frequency and scaling support (rhbz#1648273)
  - qemu: Check TSC frequency before starting QEMU (rhbz#1648273)
  - cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1648273)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686898)
  - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686898)
  - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686898)
  - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686898)
  - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686898)
  - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686898)
  - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686898)
  - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686898)
  - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686898)
  - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686898)
  - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686898)
  - cpu_x86: Store CPU signature in an array (rhbz#1686898)
  - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686898)
  - cpu_x86: Log decoded CPU model and signatures (rhbz#1686898)
  - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686898)
  - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686898)
  - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686898)
  - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686898)
  - cpu_map: Add hex representation of signatures (rhbz#1686898)
  - cputest: Test CPU signatures (rhbz#1686898)
  - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686898)
  - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686898)
  - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686898)
  - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686898)
  - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686898)
  - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686898)
  - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686898)
  - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686898)
  - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686898)
  - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686898)


author: Jiri Denemark <jdenemar@redhat.com> - 5.0.0-11
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
  - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
  - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.0-1
changelog:
  - New upstream version 1.4.0.
  - New plugins: random, zero.
  - New bash tab completion subpackage.
  - Remove unused build dependencies.


author: Richard W.M. Jones <rjones@redhat.com> - 1.4.2-4
changelog:
  - Remove misguided LDFLAGS hack which removed server hardening.
    https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6
    resolves: rhbz#1624149


author: Laine Stump <laine@redhat.com>
changelog:
  - Improve performance with large number of interfaces
     (Bug 1268384, Bug 1271341)
   - recognize bond devices with no slaves


author: Danilo C. L. de Paula <ddepaula@redhat.com> - 1.11.0-1.el8
changelog:
  - Creating RHEL-8.0 initial branch based on 1.11.0
  - Resolves: bz#1515300
  - (Prepare seabios for RHEL-8.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.12.0-1.el8
changelog:
  - Rebase to 1.12.0 [bz#1666134]
  - Resolves: bz#1666134
    (Rebase seabios for RHEL-AV release in virt:8.0.0 stream)


