[ol8_kvm_appstream] qemu-kvm-15:7.2.0-6.module+el8.8.0+90040+e6f08739.aarch64

qemu-kvm is an open source virtualizer that provides hardware
emulation for the KVM hypervisor. qemu-kvm acts as a virtual
machine monitor together with the KVM kernel modules, and emulates the
hardware for a full system such as a PC and its associated peripherals.

Changelog (Show File list) (Show related packages)

• Wed Oct 18 2023 Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-6.el8

  - hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
  - hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
  - hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
  - machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
  - migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
  - vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
  - vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
  - migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
  - migration: Move more initializations to migrate_init() (Avihai Horon)
  - vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
  - migration: Add migration prefix to functions in target.c (Avihai Horon)
  - vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
  - vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
  - vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
  - qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
  - sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
  - vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
  - hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
  - exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
  - migration: fix populate_vfio_info (Steve Sistare)
  - vfio/migration: Revert out of tree P2P support (Joao Martins)
  - async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
  - async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
  - physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
  - qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
  - qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
  - qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
  - hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
  - kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
  - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
  - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]

• Fri Aug 18 2023 Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-5.el8

  - virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
  - io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
  - qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)

• Thu Jul 13 2023 Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-4.el8

  - vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
  - vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
  - sysemu: Add pre VM state change callback (Avihai Horon)
  - vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
  - vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
  - virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
  - virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
  - vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
  - vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
  - vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
  - vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
  - vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
  - vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
  - vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
  - vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
  - vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
  - vfio/migration: Reset bytes_transferred properly (Avihai Horon)
  - vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
  - vfio/migration: Add support for switchover ack capability (Avihai Horon)
  - vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
  - vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
  - vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
  - tests: Add migration switchover ack capability test (Avihai Horon)
  - migration: Enable switchover ack capability (Avihai Horon)
  - migration: Implement switchover ack logic (Avihai Horon)
  - migration: Add switchover ack capability (Avihai Horon)
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
  - target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
  - target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
  - target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
  - target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
  - target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
  - target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
  - Makefile: qemu-bundle is a directory (Juan Quintela)
  - 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
  - pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
  - pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
  - pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]

• Mon May 15 2023 Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-3.el8

  - vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon)
  - migration: fix ram_state_pending_exact() (Juan Quintela)
  - spec: allow have_tools 0 (Steve Sistare)
  - spec: allow no block device modules (Steve Sistare)
  - qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
  - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse)
  - oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
  - vfio/migration: Rename entry points (Alex Williamson)
  - docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
  - vfio/migration: Query device dirty page tracking support (Joao Martins)
  - vfio/migration: Block migration with vIOMMU (Joao Martins)
  - vfio/common: Add device dirty page bitmap sync (Joao Martins)
  - vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
  - vfio/common: Add device dirty page tracking start/stop (Joao Martins)
  - vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
  - vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
  - vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
  - vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
  - vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
  - vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
  - vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
  - vfio/common: Fix wrong %m usages (Avihai Horon)
  - vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
  - docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
  - vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
  - vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
  - vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
  - vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
  - vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
  - vfio/migration: Block multiple devices migration (Avihai Horon)
  - vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
  - vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
  - vfio/migration: Fix NULL pointer dereference bug  (Avihai Horon)
  - linux-headers: Update to v6.2-rc8 (Avihai Horon)
  - migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
  - migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
  - migration: Remove unused res_compatible (Juan Quintela)
  - migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
  - migration: I messed state_pending_exact/estimate (Juan Quintela)
  - linux-headers: Update to v6.1 (Peter Xu)
  - migration: simplify migration_iteration_run() (Juan Quintela)
  - migration: Remove unused threshold_size parameter (Juan Quintela)
  - migration: Split save_live_pending() into state_pending_* (Juan Quintela)
  - migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
  - Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
  - qemu-kvm.spec: vhost-user is conditional (Steve Sistare)
  - qemu-kvm.spec: libseccomp is conditional (Steve Sistare)

• Mon Jan 30 2023 Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-1.el8

  - vl: Add an -action option to override MCE handling (Mark Kanda)
  - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
  - Update to QEMU 7.2.0 (Karl Heubaum)

• Tue Sep 13 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-4.el8

  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
  - vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
  - Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
  - kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
  - event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
  - vhost-vdpa: backend feature should set only once (Si-Wei Liu)
  - vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
  - virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
  - virtio: fix the condition for iommu_platform not supported (Halil Pasic)
  - vdpa: Make ncs autofree (Eugenio Perez)
  - vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
  - vhost-vdpa: stick to -errno error return convention (Roman Kagan)
  - vdpa: Add dummy receive callback (Eugenio Perez)
  - vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
  - vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
  - vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
  - vhost: Rename last_index to vq_index_end (Eugenio Perez)
  - net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
  - vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
  - vhost-vdpa: multiqueue support (Jason Wang)
  - virtio-net: vhost control virtqueue support (Jason Wang)
  - vhost: record the last virtqueue index for the virtio device (Jason Wang)
  - virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
  - vhost-net: control virtqueue support (Jason Wang)
  - net: introduce control client (Jason Wang)
  - vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
  - vhost-vdpa: prepare for the multiqueue support (Jason Wang)
  - vhost-vdpa: classify one time request (Jason Wang)
  - vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
  - vdpa: Check for iova range at mappings changes (Eugenio Perez)
  - vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
  - net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
  - net/vhost-user: Fix device compatibility check (Kevin Wolf)
  - net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
  - memory: Name all the memory listeners (Peter Xu)
  - vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
  - vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
  - vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
  - vhost_net: do not assume nvqs is always 2 (Jason Wang)
  - vhost: use unsigned int for nvqs (Jason Wang)
  - vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
  - vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
  - vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
  - vhost: correctly detect the enabling IOMMU (Jason Wang)
  - virtio-pci: implement iommu_enabled() (Jason Wang)
  - virtio-bus: introduce iommu_enabled() (Jason Wang)
  - hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
  - vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
  - target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]

• Fri Apr 08 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-3.el8

  - acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]

• Wed Mar 09 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-2.el8

  - vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
  - qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
  - block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}

• Wed Feb 02 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-1.el8

  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
  - acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
  - Update to QEMU 6.1.1 (Karl Heubaum)

• Wed Jan 19 2022 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1.15.el8

  - qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
  - Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
  - lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
  - target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
  - target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
  - target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
  - target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
  - target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
  - target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)