- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)

- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)

- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)

- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)

- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)

- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)

- util: avoid getting stuck on macvtapN name created outside libvirt (rhbz#1321637)

- qemu: Always format model for host-model CPUs (rhbz#1310747)

- daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1277235)

- qemu: fix hotplugging cpus with strict memory pinning (rhbz#1265970)

- util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
- util: set macvtap physdev online when macvtap is set online (rhbz#1113474)

- qemu: cgroup: Fix memory leak when there's no vCPU pinning (rhbz#1209891)

- conf: Don't format actual network definition in migratable XML (rhbz#1203367)
- util: more verbose error when failing to create macvtap device (rhbz#1203367)

- qemu: Fix checking of ABI stability when restoring external checkpoints (rhbz#1180521)
- qemu: Use "migratable" XML definition when doing external checkpoints (rhbz#1180521)
- qemu: Fix memleak after commit 59898a88ce8431bd3ea249b8789edc2ef9985827 (rhbz#1180521)

- qemu: allow restore with non-migratable XML input (rhbz#1155564)
- qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155564)
- Make ABI stability issue easier to debug (rhbz#1155564)
- CVE-2014-3633: qemu: blkiotune: Use correct definition when looking up disk (CVE-2014-3633)
- domain_conf: fix domain deadlock (CVE-2014-3657)
- CVE-2014-7823: dumpxml: security hole with migratable flag (CVE-2014-7823)

- Revert "qemu: export disk snapshot support in capabilities" (rhbz#1150609)

- cpu: separate host-model and host-passthrough (rhbz#1138222)
- Don't include non-migratable features in host-model (rhbz#1138222)
- Don't add dhcp hosts to hostsfile twice (rhbz#1137011)

- qemu: allow restore with non-migratable XML input (rhbz#1155563)
- qemu: Introduce qemuDomainDefCheckABIStability (rhbz#1155563)
- Make ABI stability issue easier to debug (rhbz#1155563)

- rpc: message related sizes enlarged (rhbz#1128603)
- Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (rhbz#1128603)
- Fix max stream packet size for old clients (rhbz#1128603)
- Adjust legacy max payload size to account for header information (rhbz#1128603)
- rpc: Correct the wrong payload size checking (rhbz#1128603)

- virsh: Introduce macros to reject mutually exclusive arguments (rhbz#1120669)
- virsh-domain: Add --live, --config, --current logic to cmdAttachDisk (rhbz#1120669)
- virsh-domain: Add --live, --config, --current logic to cmdDetachDevice (rhbz#1120669)
- virsh-domain: Add --live, --config, --current logic to cmdDetachDisk (rhbz#1120669)
- virsh: Use inactive definition when removing disk from config (rhbz#1120669)
- virsh-domain: Add --live, --config, --current logic to cmdAttachDevice (rhbz#1120669)

- qemuDomainObjBeginJobInternal: Return -2 for temporary failures (rhbz#1100671)
- qemu: Make qemuProcess{Start, Stop}CPUs easier to follow (rhbz#1100671)
- qemu: Ignore temporary job errors when checking migration status (rhbz#1100671)
- qemu: Send migrate_cancel when aborting migration (rhbz#1100642)
- qemu: add host-pci-multidomain capability (rhbz#1100737)
- qemu: specify domain in host-side PCI addresses when needed/supported (rhbz#1100737)
- spec: Switch to "git am" for applying patches

- LSN-2014-0003: Don't expand entities when parsing XML (CVE-2014-0179)
- QoS: make tc filters match all traffic (rhbz#1096806)
- use virBitmapFree instead of VIR_FREE for cpumask (rhbz#1091206)
- Properly free vcpupin info for unplugged CPUs (rhbz#1091206)
- sanlock: code movement in virLockManagerSanlockAcquire (rhbz#1097227)
- sanlock: don't fail with unregistered domains (rhbz#1097227)
- sanlock: avoid leak in acquire() (rhbz#1097227)

- Avoid applying reproducer from libvirt-qemu-monitor-Fix-invalid-parentheses.patch (rhbz#1080471)

- sanlock: Truncate domain names longer than SANLK_NAME_LEN (rhbz#1070905)

- Block info query: Add check for transient domain (rhbz#1059904)
- network: Only prevent forwarding of DNS requests for unqualified names (rhbz#1062708)
- network: Change default of forwardPlainNames to 'yes' (rhbz#1062708)

- qemu: Avoid operations on NULL monitor if VM fails early (rhbz#1055578)
- qemu: Do not access stale data in virDomainBlockStats (CVE-2013-6458)
- qemu: Avoid using stale data in virDomainGetBlockInfo (CVE-2013-6458)
- qemu: Fix job usage in qemuDomainBlockJobImpl (CVE-2013-6458)
- qemu: Fix job usage in qemuDomainBlockCopy (rhbz#1054804)
- qemu: Fix job usage in virDomainGetBlockIoTune (CVE-2013-6458)
- Don't crash if a connection closes early (CVE-2014-1447)
- Really don't crash if a connection closes early (CVE-2014-1447)

- qemuDomainDestroyFlags: Don't allow @vm to disappear while executing API (rhbz#1038816)
- python: Return dictionary without value in case of no blockjob (rhbz#1038815)
- remote: Fix regression in event deregistration (rhbz#1038814)
- Add virtio-scsi to fallback models of scsi controller (rhbz#1040141)

- Fix race in starting transient VMs (rhbz#1029632)

- virNetDevBandwidthEqual: Make it more robust (rhbz#1014198)
- qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1014198)
- qemu: Generate correct name for hostdev network devices (rhbz#1001881)

- network: Allow <vlan> in type='hostdev' networks (rhbz#1014445)
- libvirt-guests: status: Return non-zero when stopped (rhbz#1017196)
- qemu: Take error path if acquiring of job fails in qemuDomainSaveInternal (rhbz#1017194)
- virNetDevBandwidthEqual: Make it more robust (rhbz#1017198)
- qemu_hotplug: Allow QoS update in qemuDomainChangeNet (rhbz#1017198)

- spec: Update requirements to pick up rebuilt polkit (CVE-2013-4311)

- qemuDomainChangeGraphics: Check listen address change by listen type (rhbz#976543)
- build: Fix build with -Werror (rhbz#976543)

- virSocketAddrIsWildcard: Use IN6_IS_ADDR_UNSPECIFIED correctly (rhbz#966587)

- daemon: Fix leak after listing volumes (CVE-2013-1962)
- Don't try to add non-existant devices to ACL (rhbz#958837)
- Avoid spamming logs with cgroups warnings (rhbz#958837)
- audit: Properly encode device path in cgroup audit (rhbz#958839)

- rpc: Fix client crash when server drops connection (rhbz#950601)
- storage: Fix volume cloning for logical volume. (rhbz#950604)
- qemu: Allow migration over IPv6 (rhbz#950597)
- qemu: Set IPv6 migration capability when dump-guest-core is present (rhbz#950597)
- remote: Don't call NULL closeFreeCallback (rhbz#950599)
- libvirt: Increase connection reference count for callbacks (rhbz#950599)
- virsh: Unregister the connection close notifier upon termination (rhbz#950599)
- virsh: Move cmdConnect from virsh-host.c to virsh.c (rhbz#950599)
- virsh: Register and unregister the close callback also in cmdConnect (rhbz#950599)
- rpc: Fix connection close callback race condition and memory corruption/crash (rhbz#950599)
- tests: Fix qemumonitorjsontest deadlock when the machine is under load (rhbz#951235)
- Avoid use of free'd memory in auto destroy callback (rhbz#951073)
- Fix crash in QEMU auto-destroy with transient guests (rhbz#951073)

- util: Retry NLM_F_REQUEST with different values of IFLA_EXT_MASK (rhbz#928881)
- security_manager: Don't manipulate domain XML in virDomainDefGetSecurityLabelDef (rhbz#928879)
- security: Don't add seclabel of type none if there's already a seclabel (rhbz#928879)
- libvirt_private.syms: Correctly export seclabel APIs (rhbz#928879)
- security_manager.c: Append seclabel iff generated (rhbz#928879)

- qemu: Fix startupPolicy regression (rhbz#915349)

- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)
- spec: Disable libssh2 support (rhbz#513363)

- rpc: Fix crash on error paths of message dispatching (CVE-2013-0170)

- nodeinfo: Add check and workaround to guarantee valid cpu topologies (rhbz#877024)
- tests: Reduce length of nodeinfodata test names (rhbz#877024)
- nodeinfotest: Add test data for 2 processor host with broken NUMA (rhbz#877024)
- nodeinfotest: Add test data from a AMD bulldozer machine. (rhbz#877024)
- Wire up handling for QMP's BALLOON_EVENT (rhbz#884713)

- rpc: Switch to dynamically allocated message buffer (rhbz#869650)
- rpc: Size up RPC limits (rhbz#869650)
- client: Free message when freeing client (rhbz#869650)
- nodeinfo_test: Enhance test data before changing nodeinfo gathering (rhbz#869723)
- nodeinfo: Fix gathering of nodeinfo data structure (rhbz#869723)
- test: Add new test case for nodeinfotest (rhbz#869723)
- test: Add test case for nodeinfotest if host machine doesn't have NUMA (rhbz#869723)
- nodeinfo: Deal with offline cpus in a node (rhbz#869723)
- qemu: Always format CPU topology (rhbz#868972)
- iohelper: Fdatasync() at the end (rhbz#873292)
- iohelper: Don't report errors on special FDs (rhbz#873292)
- Introduce new VIR_DOMAIN_EVENT_SUSPENDED_API_ERROR event (rhbz#874235)
- qemu: Emit event if 'cont' fails (rhbz#874235)
- qemu: Allow migration to be cancelled at prepare phase (rhbz#875770)
- AbortJob: Fix documentation (rhbz#875770)
- qemu: Avoid deadlock on HandleAgentEOF (rhbz#875788)

- security: Fix libvirtd crash possibility (CVE-2012-4423)
- Fix augeas test of shared sanlock leases (rhbz#858988)
- qemu augeas: Add spice_tls/spice_tls_x509_cert_dir (rhbz#858988)
- Fix mistakes in augeas lens (rhbz#858988)
- qemu: Fix failure path in disk hotplug (rhbz#859376)
- blockjob: Relabel entire existing chain (rhbz#860720)

- daemon: Fix crash in virTypedParameterArrayClear (rhbz#844735)
- remote: Fix locking in stream APIs (rhbz#847946)
- Using virOnce for global initialization is desirable (rhbz#847959)
- json: Fix interface locale dependency (rhbz#847959)

- sanlock: Fix locking for readonly devices (rhbz#838819)
- Add support for shared sanlock leases (rhbz#838819)
- Fix compilation on older sanlock (rhbz#838819)

- avoid closing uninitialized fd (rhbz#827050)
- avoid fd leak (rhbz#827050)
- command: avoid double close bugs (rhbz#827050)
- fdstream: avoid double close bug (rhbz#827050)
- command: check for fork error before closing fd (rhbz#827050)
- qemu: avoid closing fd more than once (rhbz#827050)
- Disable keepalives by default (rhbz#832184)

- qemu: Rollback on used USB devices (rhbz#743671)
- qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#743671)
- Revert "rpc: Discard non-blocking calls only when necessary" (rhbz#821468)

- qemu: Start nested job in qemuDomainCheckEjectableMedia (rhbz#826639)
- Avoid closing uninitialized fd (rhbz#827047)
- Avoid fd leak (rhbz#827047)
- command: Avoid double close bugs (rhbz#827047)
- fdstream: Avoid double close bug (rhbz#827047)
- command: Check for fork error before closing fd (rhbz#827047)
- qemu: Avoid closing fd more than once (rhbz#827047)

- qemu: Add support for domain cleanup callbacks (rhbz#806206)
- qemu: Avoid dangling migration-in job on shutoff domains (rhbz#806206)
- qemu: Add connection close callbacks (rhbz#806206)
- qemu: Make autodestroy utilize connection close callbacks (rhbz#806206)
- qemu: Avoid dangling migration-out job when client dies (rhbz#806206)

- libvirtd: Create run dir when running at non-root user (rhbz#798177)
- logging: Do not log timestamp through syslog (rhbz#798906)
- logging: Add date to log timestamp (rhbz#798906)
- Fix off-by-one printing month in logging code (rhbz#798906)
- Add internal APIs for dealing with time (rhbz#798906)
- Make logging async signal safe wrt time stamp generation (rhbz#798906)

- fix a regression introduced in previous build when detaching devices
- qemu: Honor the original properties of PCI device when detaching (rhbz#784785)

- seclabel: Fix regression in libvirtd restart (rhbz#770958)
- qemu: Add capabilities flags related to SG_IO (rhbz#768469)
- qemu: Add new disk device='lun' for bus='virtio' & type='block' (rhbz#768469)

- nwfilter: Avoid failure with noexec /tmp (rhbz#754182)
- nwfilter: Simplify execution of ebiptables scripts (rhbz#754182)

- Revert "Set qemu migration speed unlimited when migrating to file" (rhbz#751900)

- stream: Avoid use-after-free (rhbz#749531)
- storage: Avoid memory leak (rhbz#749531)
- Add missing error reporting when loading mac filter config for QEMU (rhbz#749531)
- qemu: Avoid memory leaks (rhbz#749531)
- storage: Plug iscsi memory leak (rhbz#749531)

- debug: Avoid null dereference on uuid lookup api (rhbz#728546)
- Fix auditing of disk hotunplug operations (rhbz#728516)
- storage: Fix regression with backing format (rhbz#726617)
- Fix performance problem of virStorageVolCreateXMLFrom() (rhbz#715400)
- qemu: Translate boot config into bootindex if possible (rhbz#715401)
- remote: Protect against integer overflow (rhbz#717202)
Resolves: rhbz#728546, rhbz#728516, rhbz#715400, rhbz#715401, rhbz#717202
Resolves: rhbz#726617

- network: Fix NULL dereference during error recovery (rhbz#696660)
- virsh: Fix regression in parsing optional integer (rhbz#693963)
- util: Fix crash when removing entries during hash iteration (rhbz#693385)
- Experimental libvirtd upstart job (rhbz#678084)

- Properly initialize supplementary groups for qemu process (rhbz#668692)
- Make error reporting in libvirtd thread safe (CVE-2011-1486)

- Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)

- Remove patches not suitable for proper Z-stream:
    - Export host information through SMBIOS to guests (rhbz#652678)
    - Support forcing a CDROM eject (rhbz#658147)
- Plug several memory leaks (rhbz#672549)
- Avoid memory overhead of matchpathcon (rhbz#672554)
- Do not start libvirt-guests if that service is off (rhbz#668694)