[ol8_kvm_appstream] libvirt-daemon-driver-nwfilter-5.7.0-37.module+el8.6.0+20847+e0e2c16f.x86_64

The nwfilter driver plugin for the libvirtd daemon, providing
an implementation of the firewall APIs using the ebtables,
iptables and ip6tables capabilities

Changelog (Show File list) (Show related packages)

• Tue Oct 18 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-37.el8

  - vNUMA: Auto adjust 'maxvcpus' for vCORE placement (Wim ten Have) [Orabug: 34670399]
  - qemu: support kvm-poll-control performance hint (Tim Wiederhake) [Orabug: 34695476]
  - qemu: fix EFI nvram removal on domain undefine (Pavel Mores) [Orabug: 34543837]
  - util: keep the pidfile locked (Marc-André Lureau) [Orabug: 34500172]
  - qemuProcessStartManagedPRDaemon: Don't pass -f pidfile to the daemon (Michal Privoznik) [Orbug: 34500172]
  - virCommand: Actually acquire pidfile instead of just writing it (Michal Privoznik) [Orbug: 34500172]
  - qemu: Don't explicitly remove pidfile after virPidFileForceCleanupPath() (Michal Privoznik) [Orbug: 34500172]
  - virPipeImpl: Don't overwrite error (Peter Krempa) [Orbug: 34500172]
  - src: introduce a wrapper for the pipe2() system call (Daniel P. Berrangé) [Orbug: 34500172]

• Thu Aug 18 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-36.el8

  - util: Netdev fixes for phys_port_id to get the ifname of a VF (Wim ten Have) [Orabug: 34417160]
  - qemuProcessStop: Don't try to remove QoS on already removed TAP (Michal Privoznik) [Orabug: 34206752]
  - virnetdevopenvswitch: Fix 'burst' value passed to ovs-vsctl (Michal Privoznik) [Orabug: 34206752]
  - util: Avoid null pointer dereference when setting QoS on OVS (Jiri Denemark) [Orabug: 34206752]
  - virnetdevopenvswitch: unify calculation of ovs and tc (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Fix qos cleaning residual on multi interfaces (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Introduce virNetDevOpenvswitchInterfaceClearTxQos and virNetDevOpenvswitchInterfaceClearRxQos (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Extract common code block to a single function (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Extract conversion parameters between virNetDevBandwidth and ovs (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Add vmuuid notes on virNetDevOpenvswitchInterfaceSetQos (Jinsheng Zhang) [Orabug: 34206752]
  - qemu: interface: check and use ovs command to set qos of ovs managed port (Jinsheng Zhang) [Orabug: 34206752]
  - qemu: interface: remove setting noqueue for ovs port (Jinsheng Zhang) [Orabug: 34206752]
  - virDomain: interface: add virNetDevOpenvswitchInterfaceSetQos and virNetDevOpenvswitchInterfaceClearQos (Jinsheng Zhang) [Orabug: 34206752]
  - virDomain: interface: add virDomainNetDefIsOvsport (Jinsheng Zhang) [Orabug: 34206752]
  - openvswitch: don't delete existing OVS port prior to recreating same port (Laine Stump) [Orabug: 34206752]
  - virnetdev: move virNetDevSetRootQDisc to virnetdevbandwidth (Pavel Hrdina) [Orabug: 34206752]
  - virnetdevbandwidth: Don't generate burst outside of boundaries (Michal Privoznik) [Orabug: 34206752]
  - qemu_hotplug: Don't dereference NULL pointer @newb in qemuDomainChangeNet() (Michal Privoznik) [Orabug: 34206752]
  - qemu: Restore default root qdisc when QoS is cleared out (Michal Privoznik) [Orabug: 34206752]
  - virnetdevopenvswitch: Simplify OVS_VSCTL cmd creation (Michal Privoznik) [Orabug: 34206752]
  - qemu: Set noqueue qdisc for TAP devices (Michal Privoznik) [Orabug: 34206752]
  - virnetdev: Introduce virNetDevSetRootQDisc() (Michal Privoznik) [Orabug: 34206752]
  - syntax-check: Don't forbid curly braces around single line condition body (Peter Krempa) [Orabug: 34206752]
  - src: util: rename some program macros (Pavel Hrdina) [Orabug: 34206752]
  - conf: rename virNetDevSupportBandwidth to virNetDevSupportsBandwidth (Ján Tomko) [Orabug: 34206752]
  - qemu: do not revert to NULL bandwidth (Ján Tomko) [Orabug: 34206752]
  - conf: return a const from virDomainNetGetActualVirtPortProfile (Laine Stump) [Orabug: 34206752]
  - qemu: move runtime netdev validation into a separate function (Laine Stump) [Orabug: 34206752]
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (Laine Stump) [Orabug: 34206752]

• Thu Jul 07 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-35.el8

  - util: add virNetDevGetPhysPortName (Moshe Levi) [Orabug: 34329649]
  - util: Add phys_port_name support on virPCIGetNetName (Dmytro Linkin) [Orabug: 34329649]

• Thu Jun 30 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-34.el8

  - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019]
  - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019]
  - qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa) [Orabug: 33091019]
  - qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa) [Orabug: 33091019]
  - qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33091019]
  - qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa) [Orabug: 33091019]
  - qemu: blockjob: Store 'flags' for all the block job types (Peter Krempa) [Orabug: 33091019]
  - qemu: blockjob: Store 'jobflags' with block job data (Peter Krempa) [Orabug: 33091019]
  - util: json: Introduce virJSONValueArrayConcat (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Add 'granularity' parameter for block-dirty-bitmap-add (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa) [Orabug: 33091019]
  - qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
  - qemu: block: enable the snapshot image deletion feature (Pavel Mores) [Orabug: 33091019]
  - qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores) [Orabug: 33091019]
  - qemu: checkpoint: fix NULL dereference at create time (Cole Robinson) [Orabug: 33091019]
  - qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa) [Orabug: 33091019]
  - util: consolidate on one free callback for hash data (Daniel P. Berrangé) [Orabug: 33091019]
  - conf: stop using hash key when free'ing hash entries (Daniel P. Berrangé) [Orabug: 33091019]
  - qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Fix rollback and access to unlocked 'vm' when deleting checkpoints (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Split out checkpoint creation code (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Don't query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa) [Orabug: 33091019]
  - util: hash: Introduce virHashHasEntry (Peter Krempa) [Orabug: 33091019]
  - util: hash: Add new constructor 'virHashNew' (Peter Krempa) [Orabug: 33091019]
  - util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa) [Orabug: 33091019]
  - conf: Introduce virDomainDiskByTarget (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Don't update current checkpoint until we are done (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa) [Orabug: 33091019]
  - qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
  - qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
  - qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Don't forbid checkpoint when VM is marked for autodestroy (Peter Krempa) [Orabug: 33091019]
  - Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have) [Orabug: 34256070]
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang) [Orabug: 34210159] {CVE-2021-3975}

• Tue May 03 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-33.el8

  - qemu: refresh vNUMA/SMT pinning (Wim ten Have) [Orabug: 34083505]
  - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have) [Orabug: 34023508]
  - nwfilter: fix crash when counting number of network filters (Daniel P. Berrangé) [Orabug: 33973639] {CVE-2022-0897}

• Fri Jan 28 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-32.el8

  - qemu: Validate config->exadata before reaping guests (Wim ten Have) [Orabug: 33763967]
  - qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have) [Orabug: 33268059]
  - qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have) [Orabug: 33268059]
  - qemu: Label restore path outside of secdriver transactions (Michal Privoznik) [Orabug: 33351242]
  - security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Privoznik) [Orabug: 33351242]

• Fri Oct 08 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-31.el8

  - qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

• Fri Oct 01 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-30.el8

  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
  - qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
  - qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

• Mon Sep 06 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-29.el8

  - qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: Tell secdrivers which images are top parent (Michal Prívozník) [Orabug: 33086913]
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Prívozník) [Orabug: 33086913]

• Wed Jun 30 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-28.el8

  - qemu_capabilities: Rework domain caps cache (Michal Prívozník) [Orabug: 32664432]
  - tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]
  - qemu: cache host arch separately from virCapsPtr (Daniel P. Berrangé) [Orabug: 32664432]
  - cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Prívozník) [Orabug: 32664432]
  - virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa) [Orabug: 32164351]
  - tests: qemu: Add test data for the new <slice> element (Peter Krempa) [Orabug: 32164351]
  - qemu: Add support for slices of type 'storage' (Peter Krempa) [Orabug: 32164351]
  - tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Properly format storage slice into backing store strings (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Store nodenames of slice in status XML (Peter Krempa) [Orabug: 32164351]
  - conf: Implement support for <slices> of disk source (Peter Krempa) [Orabug: 32164351]
  - docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa) [Orabug: 32164351]
  - qemu: block: forbid creation of storage sources with <slice> (Peter Krempa) [Orabug: 32164351]
  - qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa) [Orabug: 32164351]
  - qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa) [Orabug: 32164351]
  - util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa) [Orabug: 32164351]
  - tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa) [Orabug: 32164351]
  - docs: formatdomain: Close <source> on one of disk examples (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Refactor formatting of node names into status XML (Peter Krempa) [Orabug: 32164351]
  - tests: virstorage: Add test cases for "json:" pseudo-URI without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa) [Orabug: 32164351]
  - qemu: enable blockdev support (Peter Krempa) [Orabug: 32164351]
  - qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Build the 'pflash' drives via -machine (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Introduce helper to convert <loader> into virStorageSource (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Extract formatting of -drive for pflash (Peter Krempa) [Orabug: 32164351]
  - qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: qapi: Add support for command features (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa) [Orabug: 32164351]
  - docs: Document support for obeying <backingStore> of <disk> on input (Peter Krempa) [Orabug: 32164351]
  - conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa) [Orabug: 32164351]
  - qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa) [Orabug: 32164351]
  - domaincaps: Store domain capability features in an array (Peter Krempa) [Orabug: 32164351]
  - qemu: domcaps: Initialize all features (Peter Krempa) [Orabug: 32164351]
  - domcaps: Add function for initializing domain caps as unsupported (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Extract formatting of the <features> subelement (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa) [Orabug: 32164351]
  - conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa) [Orabug: 32164351]
  - conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa) [Orabug: 32164351]
  - conf: turn virDomainMemtuneFormat void (Peter Krempa) [Orabug: 32164351]
  - conf: domain: Split up formatting of <memtune> and <memoryBacking> (Peter Krempa) [Orabug: 32164351]
  - conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa) [Orabug: 32164351]
  - conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Make capability filler functions void (Peter Krempa) [Orabug: 32164351]
  - util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa) [Orabug: 32164351]
  - qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Use XML based disk bus convertor in error message (Peter Krempa) [Orabug: 32164351]
  - storagefile: Fill in meta->externalDataStore (Cole Robinson) [Orabug: 32164351]
  - storagefile: Add externalDataStore member (Cole Robinson) [Orabug: 32164351]
  - storagefile: Split out virStorageSourceNewFromChild (Cole Robinson) [Orabug: 32164351]
  - storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson) [Orabug: 32164351]
  - storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson) [Orabug: 32164351]
  - storagefile: Add externalDataStoreRaw member (Cole Robinson) [Orabug: 32164351]
  - storagefile: Fix backing format \0 check (Cole Robinson) [Orabug: 32164351]
  - storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson) [Orabug: 32164351]
  - storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Use qcowXGetBackingStore directly (Cole Robinson) [Orabug: 32164351]
  - storagefile: Drop now unused isQCow2 argument (Cole Robinson) [Orabug: 32164351]
  - storagefile: Check version to determine if qcow2 or not (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Fix check for empty backing file (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson) [Orabug: 32164351]
  - qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Replace snapshot transaction action generator (Peter Krempa) [Orabug: 32164351]
  - tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin) [Orabug: 32164351]
  - qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa) [Orabug: 32164351]
  - conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa) [Orabug: 32164351]
  - conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa) [Orabug: 32164351]
  - tests: add qemu capabilities data for qemu 4.2 (Peter Krempa) [Orabug: 32164351]
  - lxc: fix compile error (Joe Jin) [Orabug: 32164351]
  - qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa) [Orabug: 32164351]
  - qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa) [Orabug: 32164351]
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Prívozník) [Orabug: 32164351]
  - qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa) [Orabug: 32164351]
  - qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong) [Orabug: 32164351]
  - qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong) [Orabug: 32164351]
  - qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Prívozník) [Orabug: 32164351]
  - Revert "qemu: add socket datagram capability" (Michal Prívozník) [Orabug: 32164351]
  - tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa) [Orabug: 32164351]
  - snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia) [Orabug: 32164351]
  - qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia) [Orabug: 32164351]
  - qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark) [Orabug: 32164351]
  - qemu: Fix regression in snapshot-revert (Eric Blake) [Orabug: 32164351]
  - lib: Define and use autofree for virConfPtr (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Use more of VIR_AUTOUNREF() (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Use more of VIR_AUTOFREE() (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Prívozník) [Orabug: 32164351]
  - virhostdev: Don't unref @pcidevs twice (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - remote: fix UNIX socket path being incorrectly built for libvirtd (eater) [Orabug: 32164351]
  - lib: Grab write lock when modifying list of domains (Michal Prívozník) [Orabug: 32164351]
  - qemu: reset VM id after external devices stop (Marc-André Lureau) [Orabug: 32164351]
  - qemu: add dbus-vmstate capability (Marc-André Lureau) [Orabug: 32164351]
  - qemu: add socket datagram capability (Marc-André Lureau) [Orabug: 32164351]
  - tests: fix xml2xml tpm-emulator.xml test (Marc-André Lureau) [Orabug: 32164351]
  - qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa) [Orabug: 32164351]
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa) [Orabug: 32164351]
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa) [Orabug: 32164351]
  - qemu: Add -blockdev support for external snapshots (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa) [Orabug: 32164351]
  - qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa) [Orabug: 32164351]
  - qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Save status and config XMLs only on success (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Fix shallow non-reuse block copy (Peter Krempa) [Orabug: 32164351]
  - qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa) [Orabug: 32164351]
  - qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa) [Orabug: 32164351]
  - qemu: Prevent storage causing too much nested XML (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa) [Orabug: 32164351]
  - qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark) [Orabug: 32164351]
  - qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa) [Orabug: 32164351]
  - tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Use correct type when creating image size JSON entries (Peter Krempa) [Orabug: 32164351]
  - Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have) [Orabug: 32708041]
  - virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)
  - virt-admin: Introduce command srv-update-tls (Zhang Bo) [Orabug: 32768102]
  - admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]
  - tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo) [Orabug: 32768102]
  - virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]