# changelog

author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 20230227.cvm release for OL9 which includes the following fixed CVEs:
    {CVE-2021-38578}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 20230821 release for OL9 which includes the following fixed CVEs:
    {CVE-2019-14560}
  - Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
    {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 20240227 release for OL9 which includes the following fixed CVEs:
    {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
  - Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
    {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 20240909 release for OL9 which includes the following fixed CVEs:
  - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
  - EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
  - EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
  - EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 20250102 release for OL9 which includes the following fixed CVEs:
  - EDK2: EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage(). An Attacker may cause memory corruption due to an overflow via an adjacent network [Orabug: 37414309] {CVE-2024-38796}
  - Update to OpenSSL 3.0.15 which includes the following fixed CVEs:
    {CVE-2023-4807} {CVE-2023-5363} {CVE-2023-5678} {CVE-2023-6129} {CVE-2023-6237} {CVE-2024-0727} {CVE-2024-2511} {CVE-2024-4603} {CVE-2024-4741} {CVE-2024-5535} {CVE-2024-6119}


author: Mark Kanda <mark.kanda@oracle.com> - 7.2.0-20.el9
changelog:
  - Document CVEs as not applicable to QEMU 7.2.0 (Mark Kanda) [Orabug: 36869706] [Orabug: 36620547] [Orabug: 37043479] {CVE-2024-3567} {CVE-2024-4693} {CVE-2024-7730}
  - target/i386: Remove rtm, hle and taa-no from the Sapphire Rapids CPU model (Mark Kanda) [Orabug: 37867203]
  - target/i386: Reset parked vCPUs together with the online ones (Maciej S. Szmigiero)
  - migration: Add capability for our custom switchover event (Maciej S. Szmigiero)
  - iotests: Disable ones that hang (Maciej S. Szmigiero)
  - vfio/migration: Use BE byte order for device state wire packets (Maciej S. Szmigiero)
  - vfio/migration: Make x-migration-multifd-transfer VFIO property mutable (Maciej S. Szmigiero)
  - vfio/migration: Add x-migration-multifd-transfer VFIO property (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer support - send side (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer support - config loading support (Maciej S. Szmigiero)
  - migration/qemu-file: Define g_autoptr() cleanup function for QEMUFile (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer support - load thread (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer support - received buffers queuing (Maciej S. Szmigiero)
  - vfio/migration: Setup and cleanup multifd transfer in these general methods (Maciej S. Szmigiero)
  - vfio/migration: Multifd setup/cleanup functions and associated VFIOMultifd (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer - add support checking function (Maciej S. Szmigiero)
  - vfio/migration: Multifd device state transfer support - basic types (Maciej S. Szmigiero)
  - vfio/migration: Move migration channel flags to vfio-common.h header file (Maciej S. Szmigiero)
  - vfio/migration: Add vfio_add_bytes_transferred() (Maciej S. Szmigiero)
  - vfio/migration: Convert bytes_transferred counter to atomic (Maciej S. Szmigiero)
  - vfio/migration: Add load_device_config_state_start trace event (Maciej S. Szmigiero)
  - migration: Add save_live_complete_precopy_thread handler (Maciej S. Szmigiero)
  - migration/multifd: Add multifd_device_state_supported() (Maciej S. Szmigiero)
  - migration/multifd: Make MultiFDSendData a struct (Peter Xu)
  - migration/multifd: Device state transfer support - send side (Maciej S. Szmigiero)
  - migration/multifd: Add an explicit MultiFDSendData destructor (Maciej S. Szmigiero)
  - migration/multifd: Make multifd_send() thread safe (Maciej S. Szmigiero)
  - migration/multifd: Device state transfer support - receive side (Maciej S. Szmigiero)
  - migration/multifd: Split packet into header and RAM data (Maciej S. Szmigiero)
  - migration: Add thread pool of optional load threads (Maciej S. Szmigiero)
  - error: define g_autoptr() cleanup function for the Error type (Maciej S. Szmigiero)
  - migration: Always take BQL for migration_incoming_state_destroy() (Maciej S. Szmigiero)
  - migration: Add qemu_loadvm_load_state_buffer() and its handler (Maciej S. Szmigiero)
  - migration: Add MIG_CMD_SWITCHOVER_START and its load handler (Maciej S. Szmigiero)
  - thread-pool: Implement generic (non-AIO) pool support (Maciej S. Szmigiero)
  - thread-pool: Rename AIO pool functions to *_aio() and data types to *Aio (Maciej S. Szmigiero)
  - thread-pool: Remove thread_pool_submit() function (Maciej S. Szmigiero)
  - migration: Check migration error after loadvm (Fabiano Rosas)
  - migration/multifd: Add a compat property for TLS termination (Fabiano Rosas)
  - migration/multifd: Terminate the TLS connection (Fabiano Rosas)
  - io: Add a read flag for relaxed EOF (Fabiano Rosas)
  - io: Add flags argument to qio_channel_readv_full_all_eof (Fabiano Rosas)
  - crypto: Remove qcrypto_tls_session_get_handshake_status (Fabiano Rosas)
  - io: tls: Add qio_channel_tls_bye (Fabiano Rosas)
  - crypto: Allow gracefully ending the TLS session (Fabiano Rosas)
  - migration/multifd: Fix compat with QEMU < 9.0 (Fabiano Rosas)
  - vfio/migration: Add vfio_save_block_precopy_empty_hit trace event (Maciej S. Szmigiero)
  - vfio/migration: Add save_{iterate, complete_precopy}_start trace events (Maciej S. Szmigiero)
  - migration/ram: Add load start trace event (Maciej S. Szmigiero)
  - migration/multifd: Stop changing the packet on recv side (Fabiano Rosas)
  - migration/multifd: Replace multifd_send_state->pages with client data (Fabiano Rosas)
  - migration/multifd: Don't send ram data during SYNC (Fabiano Rosas)
  - migration/multifd: Isolate ram pages packet data (Fabiano Rosas)
  - migration/multifd: Remove total pages tracing (Fabiano Rosas)
  - migration/multifd: Move pages accounting into multifd_send_zero_page_detect() (Fabiano Rosas)
  - migration/multifd: Replace p->pages with an union pointer (Fabiano Rosas)
  - migration/multifd: Make MultiFDPages_t:offset a flexible array member (Fabiano Rosas)
  - migration/multifd: Introduce MultiFDSendData (Fabiano Rosas)
  - migration/multifd: Remove pages->allocated (Fabiano Rosas)
  - migration/multifd: Inline page_size and page_count (Fabiano Rosas)
  - migration/multifd: Reduce access to p->pages (Fabiano Rosas)
  - migration/multifd: Decouple recv method from pages (Fabiano Rosas)
  - migration/multifd: Rename MultiFDSend|RecvParams::data to compress_data (Fabiano Rosas)
  - migration/multifd: Change multifd_pages_init argument (Fabiano Rosas)
  - migration: Introduce migrate_has_error() (Peter Xu)
  - test-vmstate: fix bad GTree usage, use-after-free (Eric Auger)
  - Revert "vfio/migration: Add save_{iterate,complete_precopy}_started trace events" (Maciej S. Szmigiero)
  - Revert "migration/ram: Add load start trace event" (Maciej S. Szmigiero)
  - Revert "migration: Add save_live_complete_precopy_{begin,end} handlers" (Maciej S. Szmigiero)
  - Revert "migration: Add qemu_loadvm_load_state_buffer() and its handler" (Maciej S. Szmigiero)
  - Revert "migration: Add load_finish handler and associated functions" (Maciej S. Szmigiero)
  - Revert "migration/multifd: Device state transfer support - receive side" (Maciej S. Szmigiero)
  - Revert "migration/multifd: Convert multifd_send_pages::next_channel to atomic" (Maciej S. Szmigiero)
  - Revert "migration/multifd: Device state transfer support - send side" (Maciej S. Szmigiero)
  - Revert "migration/multifd: Add migration_has_device_state_support()" (Maciej S. Szmigiero)
  - Revert "vfio/migration: Multifd device state transfer support - receive side" (Maciej S. Szmigiero)
  - Revert "vfio/migration: Add x-orcl-migration-multifd-transfer VFIO property" (Maciej S. Szmigiero)
  - Revert "vfio/migration: Multifd device state transfer support - send side" (Maciej S. Szmigiero)
  - target/i386: fix feature dependency for WAITPKG (Paolo Bonzini) [Orabug: 35941551]
  - target/i386: add support for VMX_SECONDARY_EXEC_ENABLE_USER_WAIT_PAUSE (Ake Koomsin) [Orabug: 35941551]
  - vhost-scsi: Add support for a worker thread per virtqueue (Mike Christie) [Orabug: 37723795]
  - vhost: Add worker backend callouts (Mike Christie) [Orabug: 37723795]
  - linux-headers: update vhost related headers to v6.5-rc1 (Mark Kanda) [Orabug: 37723795]
  - system/physmem: poisoned memory discard on reboot (William Roche) [Orabug: 34545034]
  - system/physmem: handle hugetlb correctly in qemu_ram_remap() (William Roche) [Orabug: 34545034]
  - qemu-kvm.spec: Ship multiboot_dma.bin (Liam Merwick) [Orabug: 37593199]
  - target/i386: Change unavail from u32 to u64 (Xiong Zhang) [Orabug: 37560962]
  - vfio/pci: Add x-device-dirty-page-tracking param (Joao Martins)


author: Mark Kanda <mark.kanda@oracle.com> - 7.2.0-22.el9
changelog:
  - migration/multifd: Don't send device state packets with zerocopy flag (Maciej S. Szmigiero) [Orabug: 37372623]
  - migration/dirtyrate: skip kvm_log_start/kvm_log_stop for non-KVM (Dongli Zhang) [Orabug: 37939813]


author: Mark Kanda <mark.kanda@oracle.com> - 7.2.0-24.el9
changelog:
  - Revert "migration: Temporarily re-enable our custom switchover event by default" (Mark Kanda)
  - target/i386: Enumerate verw-clear CPUID feature (Boris Ostrovsky) [Orabug: 38118557] {CVE-2024-36350} {CVE-2024-36357}


author: Mark Kanda <mark.kanda@oracle.com> - 7.2.0-26.el9
changelog:
  - accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
  - migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
  - migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
  - migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
  - migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
  - migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
  - migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
  - migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
  - migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
  - migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
  - migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
  - migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
  - target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]


author: Mark Kanda <mark.kanda@oracle.com> - 7.2.0-28.el9
changelog:
  - hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
  - arm/kvm: add support for MTE (Cornelia Huck)
  - target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
  - spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
  - kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]


