[ol8_kvm_appstream] qemu-kvm-block-curl-15:4.2.1-16.module+el8.5.0+20514+67db989a.x86_64

This package provides the additional CURL block driver for QEMU.

Install this package if you want to access remote disks over
http, https, ftp and other transports provided by the CURL library.

Changelog (Show File list) (Show related packages)

• Tue Mar 08 2022 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1.16.el8

  - Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145}
  - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson)
  - migration: Introduce ram_transferred_add() (David Edmondson)
  - ACPI ERST: specification for ERST support (Eric DeVolder)
  - ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
  - ACPI ERST: bios-tables-test testcase (Eric DeVolder)
  - ACPI ERST: qtest for ERST (Eric DeVolder)
  - ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
  - ACPI ERST: build the ACPI ERST table (Eric DeVolder)
  - ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
  - ACPI ERST: header file for ERST (Eric DeVolder)
  - ACPI ERST: PCI device_id for ERST (Eric DeVolder)
  - ACPI ERST: bios-tables-test.c steps 1 and 2 (Eric DeVolder)
  - ACPI: cleanup bios-tables-test state (Eric DeVolder)
  - KVM: x86: believe what KVM says about WAITPKG (Paolo Bonzini) [Orabug: 33832295]
  - cputlb: destroy CPUTLB with tlb_destroy (Emilio G. Cota) [Orabug: 33428107]

• Wed Jan 19 2022 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1.15.el8

  - qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
  - Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
  - lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
  - target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
  - target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
  - target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
  - target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
  - target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
  - target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)

• Wed Dec 22 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-14.el8

  - scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
  - scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
  - scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
  - scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
  - scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
  - scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
  - scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
  - scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
  - scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]

• Wed Dec 15 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-13.el8

  - pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]

• Thu Dec 02 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-12.1.el8

  - Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
  - hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
  - pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
  - pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
  - hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
  - hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
  - hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
  - pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
  - qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
  - i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
  - uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
  - usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
  - hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
  - e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
  - MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
  - target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
  - ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
  - KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
  - ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
  - ACPI: Build Hardware Error Source Table (Dongjiu Geng)
  - ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
  - docs: APEI GHES generation and CPER record description (Dongjiu Geng)
  - hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
  - acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
  - block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
  - block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]

• Sun Sep 12 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-11.el8

  - trace: use STAP_SDT_V2 to work around symbol visibility (Stefan Hajnoczi) [Orabug: 33272428]

• Tue Jul 27 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-11.el8

  - pvrdma: Fix the ring init error flow (Marcel Apfelbaum) [Orabug: 33120142] {CVE-2021-3608}
  - pvrdma: Ensure correct input on ring init (Marcel Apfelbaum) [Orabug: 33120146] {CVE-2021-3607}
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (Marcel Apfelbaum) [Orabug: 33120084] {CVE-2021-3582}
  - vhost-user-gpu: reorder free calls (Gerd Hoffmann) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: abstract vg_cleanup_mapping_iov (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (Li Qiang) [Orabug: 32950708] {CVE-2021-3545}
  - usb: limit combined packets to 1 MiB (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
  - usb/redir: avoid dynamic stack allocation (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
  - mptsas: Remove unused MPTSASState 'pending' field (Michael Tokarev) [Orabug: 32470463] {CVE-2021-3392}
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]

• Tue Jun 29 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-10.el8

  - e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257}
  - Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661}
  - block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)
  - block: Fix blk->in_flight during blk_wait_while_drained() (Kevin Wolf)
  - block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)
  - block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)
  - i386/pc: let iterator handle regions below 4G (Joao Martins)
  - arm/virt: Add memory hot remove support (Shameer Kolothum) [Orabug: 32643506]
  - i386/pc: consolidate usable iova iteration (Joao Martins)
  - i386/acpi: fix SRAT ranges in accordance to usable IOVA (Joao Martins)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - multifd: Make multifd_save_setup() get an Error parameter (Juan Quintela)
  - multifd: Make multifd_load_setup() get an Error parameter (Juan Quintela)
  - migration: fix maybe-uninitialized warning (Marc-André Lureau)
  - migration: Fix the re-run check of the migrate-incoming command (Yury Kotov)
  - multifd: Initialize local variable (Juan Quintela)
  - multifd: Be consistent about using uint64_t (Juan Quintela)
  - Bug #1829242 correction. (Alexey Romko)
  - migration/multifd: fix destroyed mutex access in terminating multifd threads (Jiahui Cen)
  - migration/multifd: fix nullptr access in terminating multifd threads (Jiahui Cen)
  - migration/multifd: not use multifd during postcopy (Wei Yang)
  - migration/multifd: clean pages after filling packet (Wei Yang)
  - migration: Make sure that we don't call write() in case of error (Juan Quintela)
  - migration: fix multifd_send_pages() next channel (Laurent Vivier)
  - migration/multifd: bypass uuid check for initial packet (Elena Ufimtseva) [Orabug: 32610480]
  - migration/tls: add error handling in multifd_tls_handshake_thread (Hao Wang)
  - migration/tls: fix inverted semantics in multifd_channel_connect (Hao Wang)
  - migration/multifd: do not access uninitialized multifd_recv_state (Elena Ufimtseva) [Orabug: 32795384]
  - io/channel-tls.c: make qio_channel_tls_shutdown thread-safe (Lukas Straub)
  - qemu.spec: Enable qemu-guest-agent RPM for OL7 (Karl Heubaum) [Orabug: 32415543]
  - virtio-net: Set mac address to hardware if the peer is vdpa (Cindy Lu)
  - net: Add vhost-vdpa in show_netdevs() (Cindy Lu)
  - vhost-vdpa: Add qemu_close in vhost_vdpa_cleanup (Cindy Lu)
  - hw/virtio/vhost-vdpa: Fix Coverity CID 1432864 (Philippe Mathieu-Daudé)
  - vhost-vdpa: negotiate VIRTIO_NET_F_STATUS with driver (Si-Wei Liu)
  - configure: Fix build dependencies with vhost-vdpa. (Laurent Vivier)
  - configure: simplify vhost condition with Kconfig (Marc-André Lureau)
  - vhost-vdpa: add trace-events (Laurent Vivier)
  - dma/pl330: Fix qemu_hexdump() usage in pl330.c (Mark Kanda)
  - util/hexdump: introduce qemu_hexdump_line() (Laurent Vivier)
  - util/hexdump: Reorder qemu_hexdump() arguments (Philippe Mathieu-Daudé)
  - util/hexdump: Convert to take a void pointer argument (Philippe Mathieu-Daudé)
  - net/colo-compare.c: Only hexdump packets if tracing is enabled (Lukas Straub)
  - vhost-vdpa: batch updating IOTLB mappings (Jason Wang)
  - vhost: switch to use IOTLB v2 format (Jason Wang)
  - vhost-vdpa: remove useless variable (Laurent Vivier)
  - virtio: vdpa: omit check return of g_malloc (Li Qiang)
  - vhost-vdpa: fix indentation in vdpa_ops (Stefano Garzarella)
  - virtio-net: check the existence of peer before accessing vDPA config (Jason Wang)
  - virtio-pci: fix wrong index in virtio_pci_queue_enabled (Yuri Benditovich)
  - virtio-pci: fix virtio_pci_queue_enabled() (Laurent Vivier)
  - vhost-vdpa :Fix Coverity CID 1430270 / CID 1420267 (Cindy Lu)
  - vhost-vdpa: fix the compile issue without kvm (Cindy Lu)
  - vhost-vdpa: introduce vhost-vdpa net client (Cindy Lu)
  - vhost-vdpa: introduce vhost-vdpa backend (Cindy Lu)
  - linux headers: sync to 5.9-rc4 (Jason Wang)
  - Linux headers: update (Cornelia Huck)
  - virtio-net: fix rsc_ext compat handling (Cornelia Huck)
  - linux-headers: update against Linux 5.7-rc3 (Cornelia Huck)
  - linux-headers: update (Cornelia Huck)
  - virtiofsd: Pull in kernel's fuse.h (Dr. David Alan Gilbert)
  - linux-headers: Update (Bharata B Rao)
  - linux-headers: Update (Greg Kurz)
  - vhost_net: introduce set_config & get_config (Cindy Lu)
  - vhost: implement vhost_force_iommu method (Cindy Lu)
  - vhost: introduce new VhostOps vhost_force_iommu (Cindy Lu)
  - vhost: implement vhost_vq_get_addr method (Cindy Lu)
  - vhost: introduce new VhostOps vhost_vq_get_addr (Cindy Lu)
  - vhost: implement vhost_dev_start method (Cindy Lu)
  - vhost: introduce new VhostOps vhost_dev_start (Cindy Lu)
  - vhost: check the existence of vhost_set_iotlb_callback (Jason Wang)
  - virtio-pci: implement queue_enabled method (Jason Wang)
  - virtio-bus: introduce queue_enabled method (Jason Wang)
  - vhost_net: use the function qemu_get_peer (Cindy Lu)
  - net: introduce qemu_get_peer (Cindy Lu)
  - vhost: correctly turn on VIRTIO_F_IOMMU_PLATFORM (Jason Wang)
  - imx7-ccm: add digprog mmio write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - tz-ppc: add dummy read/write methods (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - spapr_pci: add spapr msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - nvram: add nrf51_soc flash read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - prep: add ppc-parity write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - vfio: add quirk device write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - pci-host: designware: add pcie-msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - hw/pci-host: add pci-intack write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
  - oslib-posix: take lock before qemu_cond_broadcast (Bauerchen) [Orabug: 32555402]
  - oslib-posix: initialize mutex and condition variable (Paolo Bonzini) [Orabug: 32555402]
  - mem-prealloc: optimize large guest startup (Bauerchen) [Orabug: 32555402]
  - i386: Add the support for AMD EPYC 3rd generation processors (Babu Moger)
  - acpi: cpuhp: document CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
  - acpi: cpuhp: add CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
  - acpi: cpuhp: spec: add typical usecases (Igor Mammedov)
  - acpi: cpuhp: spec: clarify store into 'Command data' when 'Command field' == 0 (Igor Mammedov)
  - acpi: cpuhp: spec: fix 'Command data' description (Igor Mammedov)
  - acpi: cpuhp: spec: clarify 'CPU selector' register usage and endianness (Igor Mammedov)
  - acpi: cpuhp: introduce 'Command data 2' field (Igor Mammedov)
  - x86: ich9: let firmware negotiate 'CPU hot-unplug with SMI' feature (Igor Mammedov)
  - x86: ich9: factor out "guest_cpu_hotplug_features" (Igor Mammedov)
  - x86: acpi: let the firmware handle pending "CPU remove" events in SMM (Igor Mammedov)
  - x86: acpi: introduce AcpiPmInfo::smi_on_cpu_unplug (Igor Mammedov)
  - acpi: cpuhp: introduce 'firmware performs eject' status/control bits (Igor Mammedov)
  - x68: acpi: trigger SMI before sending hotplug Notify event to OSPM (Igor Mammedov)
  - x86: acpi: introduce the PCI0.SMI0 ACPI device (Igor Mammedov)
  - x86: acpi: introduce AcpiPmInfo::smi_on_cpuhp (Igor Mammedov)
  - x86: ich9: expose "smi_negotiated_features" as a QOM property (Igor Mammedov)
  - tests: acpi: mark to be changed tables in bios-tables-test-allowed-diff (Igor Mammedov)
  - acpi: add aml_land() and aml_break() primitives (Igor Mammedov)
  - x86: cpuhp: refuse cpu hot-unplug request earlier if not supported (Igor Mammedov)
  - x86: cpuhp: prevent guest crash on CPU hotplug when broadcast SMI is in use (Igor Mammedov)
  - x86: lpc9: let firmware negotiate 'CPU hotplug with SMI' features (Igor Mammedov)
  - q35: implement 128K SMRAM at default SMBASE address (Igor Mammedov)
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daudé) [Orabug: 32470471] {CVE-2021-20221}
  - memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini) [Orabug: 32252673] {CVE-2020-27821}
  - hw/sd/sdhci: Fix DMA Transfer Block Size field (Philippe Mathieu-Daudé) [Orabug: 32613470] {CVE-2021-3409}

• Wed Mar 31 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-6.el8

  - i386/pc: Keep PCI 64-bit hole within usable IOVA space (Joao Martins)
  - pc/cmos: Adjust CMOS above 4G memory size according to 1Tb boundary (Joao Martins)
  - i386/pc: Round up the hotpluggable memory within valid IOVA ranges (Joao Martins)
  - i386/pc: Account IOVA reserved ranges above 4G boundary (Joao Martins)

• Thu Mar 11 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-5.el8

  - hostmem: fix default "prealloc-threads" count (Mark Kanda)
  - hostmem: introduce "prealloc-threads" property (Igor Mammedov)
  - qom: introduce object_register_sugar_prop (Paolo Bonzini)
  - migration/multifd: Do error_free after migrate_set_error to avoid memleaks (Pan Nengyuan)
  - multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration (Chuan Zheng)
  - migration/multifd: fix hangup with TLS-Multifd due to blocking handshake (Chuan Zheng)
  - migration/tls: add trace points for multifd-tls (Chuan Zheng)
  - migration/tls: add support for multifd tls-handshake (Chuan Zheng)
  - migration/tls: extract cleanup function for common-use (Chuan Zheng)
  - migration/multifd: fix memleaks in multifd_new_send_channel_async (Pan Nengyuan)
  - migration/multifd: fix nullptr access in multifd_send_terminate_threads (Zhimin Feng)
  - migration/tls: add tls_hostname into MultiFDSendParams (Chuan Zheng)
  - migration/tls: extract migration_tls_client_create for common-use (Chuan Zheng)
  - migration/tls: save hostname into MigrationState (Chuan Zheng)
  - tests/qtest: add a test case for pvpanic-pci (Mihai Carabas)
  - pvpanic : update pvpanic spec document (Mihai Carabas)
  - hw/misc/pvpanic: add PCI interface support (Mihai Carabas)
  - hw/misc/pvpanic: split-out generic and bus dependent code (Mihai Carabas)
  - qemu-img: Add --target-is-zero to convert (David Edmondson)
  - 9pfs: Fully restart unreclaim loop (CVE-2021-20181) (Greg Kurz) [Orabug: 32441198] {CVE-2021-20181}
  - ide: atapi: check logical block address and read size (CVE-2020-29443) (Prasad J Pandit) [Orabug: 32393835] {CVE-2020-29443}
  - Document CVE-2019-20808 as fixed (Mark Kanda) [Orabug: 32339196] {CVE-2019-20808}
  - block/iscsi:fix heap-buffer-overflow in iscsi_aio_ioctl_cb (Chen Qun) [Orabug: 32339207] {CVE-2020-11947}
  - net: remove an assert call in eth_get_gso_type (Prasad J Pandit) [Orabug: 32102583] {CVE-2020-27617}
  - nvdimm: honor -object memory-backend-file, readonly=on option (Stefan Hajnoczi) [Orabug: 32265408]
  - hostmem-file: add readonly=on|off option (Stefan Hajnoczi) [Orabug: 32265408]
  - memory: add readonly support to memory_region_init_ram_from_file() (Stefan Hajnoczi) [Orabug: 32265408]