qemu-kvm security, bug fix, and enhancement update

[8.0.0-16.el9_3]

• kvm-migration-Add-migration-prefix-to-functions-in-targe.patch [bz#2229868]
• kvm-migration-Move-more-initializations-to-migrate_init.patch [bz#2229868]
• kvm-migration-Add-.save_prepare-handler-to-struct-SaveVM.patch [bz#2229868]
• kvm-vfio-migration-Block-VFIO-migration-with-postcopy-mi.patch [bz#2229868]
• Resolves: bz#2229868
  ([vfio migration]Disable postcopy for VM with migratable vfio device)
  [8.0.0-15.el9_3]
• kvm-io-remove-io-watch-if-TLS-channel-is-closed-during-h.patch [bz#2216504]
• Resolves: bz#2216504
  (CVE-2023-3354 qemu-kvm: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service [rhel-9.3.0])
  [8.0.0-13]
• kvm-vdpa-return-errno-in-vhost_vdpa_get_vring_group-erro.patch [RHEL-923]
• kvm-vdpa-move-CVQ-isolation-check-to-net_init_vhost_vdpa.patch [RHEL-923]
• kvm-vdpa-use-first-queue-SVQ-state-for-CVQ-default.patch [RHEL-923]
• kvm-vdpa-export-vhost_vdpa_set_vring_ready.patch [RHEL-923]
• kvm-vdpa-rename-vhost_vdpa_net_load-to-vhost_vdpa_net_cv.patch [RHEL-923]
• kvm-vdpa-move-vhost_vdpa_set_vring_ready-to-the-caller.patch [RHEL-923]
• kvm-vdpa-remove-net-cvq-migration-blocker.patch [RHEL-923]
• Resolves: RHEL-923
  (vhost shadow virtqueue: state restore through CVQ)
  [8.0.0-12]
• kvm-target-i386-allow-versioned-CPUs-to-specify-new-cach.patch [bz#2094913]
• kvm-target-i386-Add-new-EPYC-CPU-versions-with-updated-c.patch [bz#2094913]
• kvm-target-i386-Add-a-couple-of-feature-bits-in-8000_000.patch [bz#2094913]
• kvm-target-i386-Add-feature-bits-for-CPUID_Fn80000021_EA.patch [bz#2094913]
• kvm-target-i386-Add-missing-feature-bits-in-EPYC-Milan-m.patch [bz#2094913]
• kvm-target-i386-Add-VNMI-and-automatic-IBRS-feature-bits.patch [bz#2094913]
• kvm-target-i386-Add-EPYC-Genoa-model-to-support-Zen-4-pr.patch [bz#2094913]
• Resolves: bz#2094913
  (Add EPYC-Genoa CPU model in qemu)
  [8.0.0-11]
• kvm-block-blkio-enable-the-completion-eventfd.patch [bz#2225354 bz#2225439]
• kvm-block-blkio-do-not-use-open-flags-in-qemu_open.patch [bz#2225354 bz#2225439]
• kvm-block-blkio-move-blkio_connect-in-the-drivers-functi.patch [bz#2225354 bz#2225439]
• kvm-block-blkio-retry-blkio_connect-if-it-fails-using-fd.patch [bz#2225354 bz#2225439]
• kvm-block-blkio-fall-back-on-using-path-when-fd-setting-.patch [bz#2225354 bz#2225439]
• kvm-block-blkio-use-blkio_set_int-fd-to-check-fd-support.patch [bz#2225354 bz#2225439]
• kvm-hw-virtio-iommu-Fix-potential-OOB-access-in-virtio_i.patch [bz#2229133]
• kvm-virtio-iommu-Standardize-granule-extraction-and-form.patch [bz#2229133]
• kvm-hw-arm-smmu-Handle-big-endian-hosts-correctly.patch [bz#2229133]
• kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214839]
• kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214839]
• kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214839]
• kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214839]
• kvm-Provide-elf2dmp-binary-in-qemu-tools.patch [bz#2165917]
• Resolves: bz#2225354
  ([vdpa-blk] The new driver virtio-blk-vhost-user not work in VM booting)
• Resolves: bz#2225439
  ([vdpa-blk] read-only=on option not work on driver virtio-blk-vhost-vdpa)
• Resolves: bz#2229133
  (Backport some virtio-iommu and smmu fixes)
• Resolves: bz#2214839
  ([AMDSERVER 9.3 Bug] Qemu SEV reduced-phys-bits fixes)
• Resolves: bz#2165917
  (qemu-kvm: contrib/elf2dmp: Windows Server 2022 support)
  [8.0.0-10]
• kvm-util-iov-Make-qiov_slice-public.patch [bz#2174676]
• kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2174676]
• kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2174676]
• kvm-iotests-iov-padding-New-test.patch [bz#2174676]
• kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2174676]
• kvm-vdpa-do-not-block-migration-if-device-has-cvq-and-x-.patch [RHEL-573]
• kvm-virtio-net-correctly-report-maximum-tx_queue_size-va.patch [bz#2040509]
• kvm-hw-pci-Disable-PCI_ERR_UNCOR_MASK-reg-for-machine-ty.patch [bz#2223691]
• kvm-vhost-vdpa-mute-unaligned-memory-error-report.patch [bz#2141965]
• Resolves: bz#2174676
  (Guest hit EXT4-fs error on host 4K disk when repeatedly hot-plug/unplug running IO disk [RHEL9])
• Resolves: RHEL-573
  ([mlx vhost_vdpa][rhel 9.3]live migration fail with ‘net vdpa cannot migrate with CVQ feature’)
• Resolves: bz#2040509
  ([RFE]:Add support for changing ‘tx_queue_size’ to a setable value)
• Resolves: bz#2223691
  ([machine type 9.2]Failed to migrate VM from RHEL 9.3 to RHEL 9.2)
• Resolves: bz#2141965
  ([TPM][vhost-vdpa][rhel9.2]Boot a guest with ‘vhost-vdpa + TPM emulator’, qemu output: qemu-kvm: vhost_vdpa_listener_region_add received unaligned region)
  [8.0.0-9]
• kvm-scsi-fetch-unit-attention-when-creating-the-request.patch [bz#2176702]
• kvm-scsi-cleanup-scsi_clear_unit_attention.patch [bz#2176702]
• kvm-scsi-clear-unit-attention-only-for-REPORT-LUNS-comma.patch [bz#2176702]
• kvm-s390x-ap-Wire-up-the-device-request-notifier-interfa.patch [RHEL-794]
• kvm-multifd-Create-property-multifd-flush-after-each-sec.patch [bz#2196295]
• kvm-multifd-Protect-multifd_send_sync_main-calls.patch [bz#2196295]
• kvm-multifd-Only-flush-once-each-full-round-of-memory.patch [bz#2196295]
• kvm-net-socket-prepare-to-cleanup-net_init_socket.patch [RHEL-582]
• kvm-net-socket-move-fd-type-checking-to-its-own-function.patch [RHEL-582]
• kvm-net-socket-remove-net_init_socket.patch [RHEL-582]
• kvm-pcie-Add-hotplug-detect-state-register-to-cmask.patch [bz#2215819]
• kvm-spec-Build-DBUS-display.patch [bz#2207940]
• Resolves: bz#2176702
  ([RHEL9][virtio-scsi] scsi-hd cannot hot-plug successfully after hot-plug it repeatly)
• Resolves: RHEL-794
  (Backport s390x fixes from QEMU 8.1)
• Resolves: bz#2196295
  (Multifd flushes its channels 10 times per second)
• Resolves: RHEL-582
  ([passt][rhel 9.3] qemu core dump occurs when guest is shutdown after hotunplug/hotplug a passt interface)
• Resolves: bz#2215819
  (Migration test failed while guest with PCIe devices)
• Resolves: bz#2207940
  ([RFE] Enable qemu-ui-dbus subpackage)
  [8.0.0-8]
• kvm-virtio-iommu-Fix-64kB-host-page-size-VFIO-device-ass.patch [bz#2211609 bz#2211634]
• kvm-virtio-iommu-Rework-the-traces-in-virtio_iommu_set_p.patch [bz#2211609 bz#2211634]
• kvm-vfio-pci-add-support-for-VF-token.patch [bz#2192818]
• kvm-vfio-migration-Skip-log_sync-during-migration-SETUP-.patch [bz#2192818]
• kvm-vfio-pci-Static-Resizable-BAR-capability.patch [bz#2192818]
• kvm-vfio-pci-Fix-a-use-after-free-issue.patch [bz#2192818]
• kvm-util-vfio-helpers-Use-g_file_read_link.patch [bz#2192818]
• kvm-migration-Make-all-functions-check-have-the-same-for.patch [bz#2192818]
• kvm-migration-Move-migration_properties-to-options.c.patch [bz#2192818]
• kvm-migration-Add-switchover-ack-capability.patch [bz#2192818]
• kvm-migration-Implement-switchover-ack-logic.patch [bz#2192818]
• kvm-migration-Enable-switchover-ack-capability.patch [bz#2192818]
• kvm-vfio-migration-Refactor-vfio_save_block-to-return-sa.patch [bz#2192818]
• kvm-vfio-migration-Store-VFIO-migration-flags-in-VFIOMig.patch [bz#2192818]
• kvm-vfio-migration-Add-VFIO-migration-pre-copy-support.patch [bz#2192818]
• kvm-vfio-migration-Add-support-for-switchover-ack-capabi.patch [bz#2192818]
• kvm-vfio-Implement-a-common-device-info-helper.patch [bz#2192818]
• kvm-hw-vfio-pci-quirks-Support-alternate-offset-for-GPUD.patch [bz#2192818]
• kvm-vfio-pci-Call-vfio_prepare_kvm_msi_virq_batch-in-MSI.patch [bz#2192818]
• kvm-vfio-migration-Reset-bytes_transferred-properly.patch [bz#2192818]
• kvm-vfio-migration-Make-VFIO-migration-non-experimental.patch [bz#2192818]
• kvm-vfio-pci-Fix-a-segfault-in-vfio_realize.patch [bz#2192818]
• kvm-vfio-pci-Free-leaked-timer-in-vfio_realize-error-pat.patch [bz#2192818]
• kvm-hw-vfio-pci-quirks-Sanitize-capability-pointer.patch [bz#2192818]
• kvm-vfio-pci-Disable-INTx-in-vfio_realize-error-path.patch [bz#2192818]
• kvm-vfio-migration-Change-vIOMMU-blocker-from-global-to-.patch [bz#2192818]
• kvm-vfio-migration-Free-resources-when-vfio_migration_re.patch [bz#2192818]
• kvm-vfio-migration-Remove-print-of-Migration-disabled.patch [bz#2192818]
• kvm-vfio-migration-Return-bool-type-for-vfio_migration_r.patch [bz#2192818]
• kvm-vfio-Fix-null-pointer-dereference-bug-in-vfio_bars_f.patch [bz#2192818]
• kvm-pc-bios-s390-ccw-Makefile-Use-z-noexecstack-to-silen.patch [bz#2220866]
• kvm-pc-bios-s390-ccw-Fix-indentation-in-start.S.patch [bz#2220866]
• kvm-pc-bios-s390-ccw-Provide-space-for-initial-stack-fra.patch [bz#2220866]
• kvm-pc-bios-s390-ccw-Don-t-use-__bss_start-with-the-larl.patch [bz#2220866]
• kvm-ui-Fix-pixel-colour-channel-order-for-PNG-screenshot.patch [bz#2222579]
• kvm-block-blkio-fix-module_block.py-parsing.patch [bz#2213317]
• kvm-Fix-virtio-blk-vhost-vdpa-typo-in-spec-file.patch [bz#2213317]
• Resolves: bz#2211609
  (With virtio-iommu and vfio-pci, qemu reports ‘warning: virtio-iommu page mask 0xfffffffffffff000 does not match 0x40201000’)
• Resolves: bz#2211634
  ([aarch64] With virtio-iommu and vfio-pci, qemu coredump when host using kernel-64k package)
• Resolves: bz#2192818
  ([VFIO LM] Live migration)
• Resolves: bz#2220866
  (Misaligned symbol for s390-ccw image during qemu-kvm build)
• Resolves: bz#2222579
  (PNG screendump doesn’t save screen correctly)
• Resolves: bz#2213317
  (Enable libblkio-based block drivers in QEMU)
  [8.0.0-7]
• kvm-numa-Validate-cluster-and-NUMA-node-boundary-if-requ.patch [bz#2171363]
• kvm-hw-arm-Validate-cluster-and-NUMA-node-boundary.patch [bz#2171363]
• kvm-hw-arm-virt-Validate-cluster-and-NUMA-node-boundary-.patch [bz#2171363]
• kvm-vhost-fix-vhost_dev_enable_notifiers-error-case.patch [RHEL-330]
• kvm-kvm-reuse-per-vcpu-stats-fd-to-avoid-vcpu-interrupti.patch [bz#2218644]
• kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2128929]
• Resolves: bz#2171363
  ([aarch64] Kernel hits Call trace with irregular CPU-to-NUMA association)
• Resolves: RHEL-330
  ([virtual network][qemu-kvm-8.0.0-rc1]qemu core dump: qemu-kvm: …/softmmu/memory.c:2592: void memory_region_del_eventfd(MemoryRegion *, hwaddr, unsigned int, _Bool, uint64_t, EventNotifier *): Assertion i != mr->ioeventfd_nb’ failed)
• Resolves: bz#2218644
  (query-stats QMP command interrupts vcpus, the Max Latencies could be more than 100us (rhel 9.3.0 clone))
• Resolves: bz#2128929
  ([rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest)
  [8.0.0-6]
• kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216201]
• kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216201]
• kvm-block-blkio-use-qemu_open-to-support-fd-passing-for-.patch [bz#2180076]
• kvm-qapi-add-fdset-feature-for-BlockdevOptionsVirtioBlkV.patch [bz#2180076]
• kvm-Enable-libblkio-block-drivers.patch [bz#2213317]
• Resolves: bz#2216201
  ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
• Resolves: bz#2180076
  ([qemu-kvm] support fd passing for libblkio QEMU BlockDrivers)
• Resolves: bz#2213317
  (Enable libblkio-based block drivers in QEMU)
  [8.0.0-5]
• kvm-block-compile-out-assert_bdrv_graph_readable-by-defa.patch [bz#2186725]
• kvm-graph-lock-Disable-locking-for-now.patch [bz#2186725]
• kvm-nbd-server-Fix-drained_poll-to-wake-coroutine-in-rig.patch [bz#2186725]
• kvm-iotests-Test-commit-with-iothreads-and-ongoing-I-O.patch [bz#2186725]
• kvm-memory-prevent-dma-reentracy-issues.patch [RHEL-516]
• kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [RHEL-516]
• kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [RHEL-516]
• kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [RHEL-516]
• kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [RHEL-516]
• kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [RHEL-516]
• kvm-raven-disable-reentrancy-detection-for-iomem.patch [RHEL-516]
• kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [RHEL-516]
• kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [RHEL-516]
• kvm-loongarch-mark-loongarch_ipi_iocsr-re-entrnacy-safe.patch [RHEL-516]
• kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [RHEL-516]
• kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [RHEL-516]
• kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [RHEL-516]
• kvm-hw-pci-Disable-PCI_ERR_UNCOR_MASK-register-for-machi.patch [bz#2189423]
• kvm-multifd-Fix-the-number-of-channels-ready.patch [bz#2196289]
• kvm-util-async-teardown-wire-up-query-command-line-optio.patch [bz#2168500]
• kvm-s390x-pv-Fix-spurious-warning-with-asynchronous-tear.patch [bz#2168500]
• Resolves: bz#2186725
  (Qemu hang when commit during fio running(iothread enable))
• Resolves: RHEL-516
  (CVE-2023-2680 qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) [rhel-9])
• Resolves: bz#2189423
  (Failed to migrate VM from rhel 9.3 to rhel 9.2)
• Resolves: bz#2196289
  (Fix number of ready channels on multifd)
• Resolves: bz#2168500
  ([IBM 9.3 FEAT] KVM: Improve memory reclaiming for z15 Secure Execution guests - qemu part)
  [8.0.0-4]
• kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2058982]
• kvm-util-mmap-alloc-qemu_fd_getfs.patch [bz#2057267]
• kvm-vl.c-Create-late-backends-before-migration-object.patch [bz#2057267]
• kvm-migration-postcopy-Detect-file-system-on-dest-host.patch [bz#2057267]
• kvm-migration-mark-mixed-functions-that-can-suspend.patch [bz#2057267]
• kvm-postcopy-ram-do-not-use-qatomic_mb_read.patch [bz#2057267]
• kvm-migration-remove-extra-whitespace-character-for-code.patch [bz#2057267]
• kvm-migration-Merge-ram_counters-and-ram_atomic_counters.patch [bz#2057267]
• kvm-migration-Update-atomic-stats-out-of-the-mutex.patch [bz#2057267]
• kvm-migration-Make-multifd_bytes-atomic.patch [bz#2057267]
• kvm-migration-Make-dirty_sync_missed_zero_copy-atomic.patch [bz#2057267]
• kvm-migration-Make-precopy_bytes-atomic.patch [bz#2057267]
• kvm-migration-Make-downtime_bytes-atomic.patch [bz#2057267]
• kvm-migration-Make-dirty_sync_count-atomic.patch [bz#2057267]
• kvm-migration-Make-postcopy_requests-atomic.patch [bz#2057267]
• kvm-migration-Rename-duplicate-to-zero_pages.patch [bz#2057267]
• kvm-migration-Rename-normal-to-normal_pages.patch [bz#2057267]
• kvm-migration-rename-enabled_capabilities-to-capabilitie.patch [bz#2057267]
• kvm-migration-Pass-migrate_caps_check-the-old-and-new-ca.patch [bz#2057267]
• kvm-migration-move-migration_global_dump-to-migration-hm.patch [bz#2057267]
• kvm-spice-move-client_migrate_info-command-to-ui.patch [bz#2057267]
• kvm-migration-Create-migrate_cap_set.patch [bz#2057267]
• kvm-migration-Create-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_colo_enabled-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_compression-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_events-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_multifd-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_zero_copy_send-to-options.patch [bz#2057267]
• kvm-migration-Move-migrate_use_xbzrle-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_block-to-options.c.patch [bz#2057267]
• kvm-migration-Move-migrate_use_return-to-options.c.patch [bz#2057267]
• kvm-migration-Create-migrate_rdma_pin_all-function.patch [bz#2057267]
• kvm-migration-Move-migrate_caps_check-to-options.c.patch [bz#2057267]
• kvm-migration-Move-qmp_query_migrate_capabilities-to-opt.patch [bz#2057267]
• kvm-migration-Move-qmp_migrate_set_capabilities-to-optio.patch [bz#2057267]
• kvm-migration-Move-migrate_cap_set-to-options.c.patch [bz#2057267]
• kvm-migration-Move-parameters-functions-to-option.c.patch [bz#2057267]
• kvm-migration-Use-migrate_max_postcopy_bandwidth.patch [bz#2057267]
• kvm-migration-Move-migrate_use_block_incremental-to-opti.patch [bz#2057267]
• kvm-migration-Create-migrate_throttle_trigger_threshold.patch [bz#2057267]
• kvm-migration-Create-migrate_checkpoint_delay.patch [bz#2057267]
• kvm-migration-Create-migrate_max_cpu_throttle.patch [bz#2057267]
• kvm-migration-Move-migrate_announce_params-to-option.c.patch [bz#2057267]
• kvm-migration-Create-migrate_cpu_throttle_initial-to-opt.patch [bz#2057267]
• kvm-migration-Create-migrate_cpu_throttle_increment-func.patch [bz#2057267]
• kvm-migration-Create-migrate_cpu_throttle_tailslow-funct.patch [bz#2057267]
• kvm-migration-Move-migrate_postcopy-to-options.c.patch [bz#2057267]
• kvm-migration-Create-migrate_max_bandwidth-function.patch [bz#2057267]
• kvm-migration-Move-migrate_use_tls-to-options.c.patch [bz#2057267]
• kvm-migration-Move-qmp_migrate_set_parameters-to-options.patch [bz#2057267]
• kvm-migration-Allow-postcopy_ram_supported_by_host-to-re.patch [bz#2057267]
• kvm-block-bdrv-blk_co_unref-for-calls-in-coroutine-conte.patch [bz#2185688]
• kvm-block-Don-t-call-no_coroutine_fns-in-qmp_block_resiz.patch [bz#2185688]
• kvm-iotests-Use-alternative-CPU-type-that-is-not-depreca.patch [bz#2185688]
• kvm-iotests-Test-resizing-image-attached-to-an-iothread.patch [bz#2185688]
• kvm-Enable-Linux-io_uring.patch [bz#1947230]
• Resolves: bz#2058982
  (Qemu core dump if cut off nfs storage during migration)
• Resolves: bz#2057267
  (Migration with postcopy fail when vm set with shared memory)
• Resolves: bz#2185688
  ([qemu-kvm] no response with QMP command block_resize)
• Resolves: bz#1947230
  (Enable QEMU support for io_uring in RHEL9)
  [8.0.0-3]
• kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2058982]
• kvm-migration-Minor-control-flow-simplification.patch [bz#2058982]
• Resolves: bz#2058982
  (Qemu core dump if cut off nfs storage during migration)
  [8.0.0-2]
• kvm-acpi-pcihp-allow-repeating-hot-unplug-requests.patch [bz#2087047]
• kvm-hw-acpi-limit-warning-on-acpi-table-size-to-pc-machi.patch [bz#1934134]
• kvm-hw-acpi-Mark-acpi-blobs-as-resizable-on-RHEL-pc-mach.patch [bz#1934134]
• Resolves: bz#2087047
  (Disk detach is unsuccessful while the guest is still booting)
• Resolves: bz#1934134
  (ACPI table limits warning when booting guest with 512 VCPUs)
  [8.0.0-1]
• Rebase to QEMU 8.0.0
• Resolves: bz#2180898
  (Rebase to QEMU 8.0.0 for RHEL 9.3.0)