- KVM: x86: Check non canonical addresses upon WRMSR
- Resolves: bz#1152982
 (CVE-2014-3610 kernel: kvm: noncanonical MSR writes [rhel-5.11.z])

- KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032217]
- Resolves: bz#1032217
 (CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.11])

- KVM: x86: prevent cross page vapic_addr access (CVE-2013-6368) [bz#1032219]
- KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032216]
- Resolves: bz#1032219
  (CVE-2013-6368 kvm: cross page vapic_addr access [rhel-5.10])
- Resolves: bz#1032216
  CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.10.z]

- kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
- Resolves: bz#947363
  (RHEL.5.8.32 guest hang when installing)

- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910839]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910839]
- Resolves: bz#910839
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-5.9.z])

- kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#684745]
- kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#684745]
- kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#684745]
- kvm-block-prevent-snapshot-mode-TMPDIR-symlink-attack.patch [bz#825687]
- Resolves: bz#684745
  (Guest I/O can't be resumed after I/O failure on one host and then migration to another host)
- Resolves: bz#825687
  (CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks [rhel-5.9])

- Add missing kvm-fix-l1_map-buffer-overflow.patch [bz#958359]
- Resolves: bz#958359
  (qemu-kvm segfault in tb_invalidate_phys_page_range())

- kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
- Resolves: bz#947363
  (RHEL.5.8.32 guest hang when installing)

- kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch [bz#851255]
- CVE: CVE-2012-3515
- Resolves: bz#851255
  (EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability [rhel-5.8.z])

- kvm-kernel-KVM-unmap-pages-from-the-iommu-when-slots-are-remove.patch [bz#814151]
- CVE: CVE-2012-2121
- Resolves: bz#814151
  (CVE-2012-2121 kvm: device assignment page leak [rhel-5.8])

- kvm-posix-aio-compat-fix-thread-accounting-leak.patch [bz#802429]
- Resolves: bz#802429
  ([RHEL5.8 Snapshot2]RHEL5.8 KVMGuest hung during Guest OS booting up)

- kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770101]
- CVE: CVE-2011-4622
- Resolves: bz#770101
  (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.8])

- changed kversion to match latest available RH kernel.
- disabled Werror flag for build

- kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772079]
- Resolves: bz#772079
  (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-5.7.z])
- kvm-Fix-external-module-compat.c-not-to-use-unsupported-.patch [bz#753860]
  (build fix)
- kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770100]
- Resolves: bz#770100
  (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.7.z])

- Updated kversion to 2.6.18-269.el to match build root
- kvm-Revert-Make-migration-robust-to-trashing-workloads.patch [bz#713392]
- Resolves: bz#713392
  (Increase migration max_downtime/or speed cause guest stalls.)

- Disable --enable-werror

- kvm-kernel-KVM-x86-zero-kvm_vcpu_events-interrupt.pad.patch [bz#665407]
- Resolves: bz#665407
  (kvm_vcpu_events.interrupt.pad must be zeroed)
- CVE: CVE-2010-4525

- Revert the bz#661397 patches as they are not enough
  - kvm-kernel-Revert-KVM-VMX-Return-0-from-a-failed-VMREAD.patch [bz#661397]
  - kvm-kernel-Revert-KVM-Don-t-spin-on-virt-instruction-faults-dur.patch [bz#661397]
- Related: bz#661397
  (reboot(RB_AUTOBOOT) fails if kvm instance is running)
- kvm-kernel-KVM-fix-AMD-initial-TSC-offset-problems-additional-f.patch [bz#656984]
- Resolves: bz#656984
  (TSC offset of virtual machines is not initialized correctly by 'kvm_amd' kernel module.)

- Adding load_gs_index to kmod symbol greylist
- Related: bz#639886
  (CVE-2010-3698 kvm: invalid selector in fs/gs causes kernel panic [rhel-5.5.z])

- kvm-qemu-don-t-strip-qemu-img-and-qemu-io-in-make-instal.patch [bz#629635]
- Resolves: bz#629635
  ([kvm] debug-info missing from kvm-qemu-img-83-164.el5_5.12)

- kvm-Fix-segfault-in-mmio-subpage-handling-code.patch [bz#619412]
- Resolves: bz#619412
  (CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpage_register() [rhel-5.5.z])

- Renumber patches on spec file to avoid patch number conflicts between
  userspace & kernel patches
- kvm-qcow2-Fix-access-after-end-of-array.patch [bz#612508]
- kvm-qcow2-Don-t-ignore-immediate-read-write-failures.patch [bz#612508]
- kvm-qcow2-Return-0-errno-in-write_l2_entries.patch [bz#612508]
- kvm-qcow2-Fix-error-return-code-in-qcow2_alloc_cluster_l.patch [bz#612508]
- kvm-qcow2-Return-0-errno-in-write_l1_entry.patch [bz#612508]
- kvm-qcow2-Return-0-errno-in-l2_allocate.patch [bz#612508]
- kvm-qcow2-Allow-qcow2_get_cluster_offset-to-return-error.patch [bz#612508]
- kvm-qcow2-Change-l2_load-to-return-0-errno.patch [bz#612508]
- kvm-qcow2-Return-right-error-code-in-write_refcount_bloc.patch [bz#612508]
- kvm-qcow2-Fix-corruption-after-error-in-update_refcount.patch [bz#612508]
- kvm-qcow2-Clear-L2-table-cache-after-write-error.patch [bz#612508]
- kvm-qcow2-Fix-error-handling-in-l2_allocate.patch [bz#612508]
- kvm-qcow2-Restore-L1-entry-on-l2_allocate-failure.patch [bz#612508]
- kvm-qcow2-Allow-get_refcount-to-return-errors.patch [bz#612508]
- kvm-qcow2-Allow-alloc_clusters_noref-to-return-errors.patch [bz#612508]
- kvm-qcow2-Return-real-error-code-in-load_refcount_block.patch [bz#612508]
- kvm-block-Add-bdrv_-p-write_sync.patch [bz#612507]
- kvm-qcow2-Use-bdrv_-p-write_sync-for-metadata-writes.patch [bz#612507]
- Resolves: bz#612507
  (qcow2 image corruption when using cache=writeback)
- Resolves: bz#612508
  (Backport qcow2 fixes to RHEL 5)

- kvm-qcow2-Export-synchronous-qcow_read-write-to-avoid-br.patch [bz#604188]
- Resolves: bz#604188
  (Guest suffers kernel panic when save snapshot then restart guest)

- Remove bios-nohotplug.bin from package
- Related: bz#579737
  (QEMU: Too many devices are available for unplug in Windows XP (and we don't support that))

- kvm-Fix-Windows-guests-SVVP-tests.patch [bz#495844]
- Resolves: bz#495844
  (KVM SVVP: "Signed Driver check" failure - on the disabled vCPUs (that the VM's BIOS doesn't hide))

- kvm-reduce-number-of-reinjects-on-ACK.patch [bz#565431]
- Resolves: bz#565431
  (KVM: WIN7-32bit blue screen (IMAGE_NAME:  ntkrnlmp.exe).)

- kvm-kernel-KVM-VMX-Check-cpl-before-emulating-debug-register-ac.patch [bz#563516]
- Resolves: bz#563516
  (KVM: Check cpl before emulating debug register access [rhel-5.4.z])

- kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch [bz#560769]
- Resolves: bz#560769
  (CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow [rhel-5.4.z])

- kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch [bz#541164]
- Resolves: bz#541164
  (CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes [rhel-5.4.z])

- Update kversion to 2.6.18-164.2.1.el5 to match build root
- kvm-kernel-KVM-VMX-flush-TLB-with-INVEPT-on-cpu-migration.patch [bz#527192]
- Resolves: bz#527192
  (vmentry fails with ept misconfig)

- kvm-qemu-virtio-net-do-not-return-stack-pointer-from-fun.patch [bz#524557]
- Resolves: bz#524557
  (QEMU crash (during virtio-net WHQL tests for Win2008 R2))

- Update kversion to 2.6.18-162.el5
- kvm-Initialize-PS2-keyboard-mouse-state-on-reset.patch [bz#517855]
- Resolves: bz#517855
  (guest not accepting keystrokes or mouse clicks after reboot)

- kvm-kernel-KVM-MMU-handle-n_free_mmu_pages-n_alloc_mmu_pages-in.patch [bz#487857]
- Resolves: bz#487857
  (The emulator hung after input "cpu_set 1 online" on qemuMonitor and select "System->Shutdown")