Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 7)

[4.5.0-23]
- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)

[4.5.0-22]
- qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
- qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)

[4.5.0-21]
- cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)

[4.5.0-20]
- util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1703661)
- util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1703661)
- util: Introduce virBitmapUnion() (rhbz#1703661)
- util: Introduce virNumaNodesetToCPUset() (rhbz#1703661)
- qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1703661)
- qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1703661)

[4.5.0-19]
- virfile: added GPFS as shared fs (rhbz#1710728)
- util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1641702)
- vircpuhost: Add support for reading MSRs (rhbz#1641702)
- virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1641702)
- qemu: Make virQEMUCapsProbeHostCPUForEmulator more generic (rhbz#1641702)
- qemuargv2xmltest: Use mocked virQEMUCapsProbeHostCPU (rhbz#1641702)
- util: Add virHostCPUGetTscInfo (rhbz#1641702)
- conf: Report TSC frequency in host CPU capabilities (rhbz#1641702)
- cpu_x86: Fix placement of *CheckFeature functions (rhbz#1641702)
- cpu_x86: Probe TSC frequency and scaling support (rhbz#1641702)
- qemu: Check TSC frequency before starting QEMU (rhbz#1641702)
- util: Propagate numad failures correctly (rhbz#1716387)

[4.5.0-18]
- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)
- locking: restrict sockets to mode 0600 (CVE-2019-10132)
- logging: restrict sockets to mode 0600 (CVE-2019-10132)
- util: require command args to be non-NULL (rhbz#1672957)
- qemu: use line breaks in command line args written to log (rhbz#1672957)

[4.5.0-17]
- cpu_map: Add support for cldemote CPU feature (rhbz#1537777)
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2019-11091, CVE-2018-12130)

[4.5.0-16]
- Handle copying bitmaps to larger data buffers (rhbz#1703159)
- nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691358)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1683175)

[4.5.0-15]
- qemu_hotplug: Initialize @charAlias in qemuDomainRemoveChrDevice (rhbz#1658198)

[4.5.0-14]
- cpu_map: Add features for Icelake CPUs (rhbz#1527659, rhbz#1526624)
- cpu_map: Add Icelake CPU models (rhbz#1526624)
- cpu_x86: Do not cache microcode version (rhbz#1576369)
- qemu: Dont cache microcode version (rhbz#1576369)
- util: Rename some functions of virresctrl (rhbz#1468650)
- util: Refactor virResctrlGetInfo in virresctrl (rhbz#1468650)
- util: Refactor virResctrlAllocFormat of virresctrl (rhbz#1468650)
- util: Add MBA capability information query to resctrl (rhbz#1468650)
- util: Add MBA check to virResctrlInfoGetCache (rhbz#1468650)
- util: Add MBA allocation to virresctrl (rhbz#1468650)
- util: Add MBA schemata parse and format methods (rhbz#1468650)
- util: Add support to calculate MBA utilization (rhbz#1468650)
- util: Introduce virResctrlAllocForeachMemory (rhbz#1468650)
- util: Introduce virResctrlAllocSetMemoryBandwidth (rhbz#1468650)
- conf: Rename cachetune to resctrl (rhbz#1468650)
- conf: Factor out vcpus parsing part from virDomainCachetuneDefParse (rhbz#1468650)
- conf: Factor out vcpus overlapping from virDomainCachetuneDefParse (rhbz#1468650)
- conf: Factor out virDomainResctrlDef update from virDomainCachetuneDefParse (rhbz#1468650)
- conf: Add support for memorytune XML processing for resctrl MBA (rhbz#1468650)
- conf: Add return value check to virResctrlAllocForeachCache (rhbz#1468650)
- conf: Add memory bandwidth allocation capability of host (rhbz#1468650)
- conf: Fix bug in finding alloc through matching vcpus (rhbz#1468650)
- resctrl: Do not calculate free bandwidth for MBA (rhbz#1468650)
- resctrl: Set MBA defaults properly (rhbz#1468650)
- resctrl: Fix testing line (rhbz#1468650)
- virresctrl: fix MBA memory leak (rhbz#1468650)
- test: caps: Add capabilities for QEMU 3.1.0 (rhbz#1628892)
- util: Introduce virHostGetDRMRenderNode helper (rhbz#1628892)
- conf: Introduce virDomainGraphics-related helpers (rhbz#1628892)
- qemu: process: spice: Pick the first available DRM render node (rhbz#1628892)
- qemu: command: Introduce qemuBuildGraphicsEGLHeadlessCommandLine helper (rhbz#1628892)
- qemu: caps: Introduce QEMU_EGL_HEADLESS_RENDERNODE capability (rhbz#1628892)
- conf: gfx: Add egl-headless as a member to virDomainGraphicsDef struct (rhbz#1628892)
- conf: gfx: egl-headless: Introduce a new <gl> subelement (rhbz#1628892)
- qemu: domain: egl-headless: Add the DRI device into the namespace (rhbz#1628892)
- qemu: cgroup: gfx: egl-headless: Add the DRI device into the cgroup list (rhbz#1628892)
- security: dac: gfx: egl-headless: Relabel the DRI device (rhbz#1628892)
- qemu: command: gfx: egl-headless: Add 'rendernode' option to the cmdline (rhbz#1628892)
- domain: conf: graphics: Fix picking DRI renderer automatically for SPICE (rhbz#1628892)
- qemu: domain: gfx: Fix shadowing of a function argument in validation (rhbz#1628892)

[4.5.0-13]
- storage: Extract out mount command creation for FS Backend (rhbz#1584663)
- storage: Move FS backend mount creation command helper (rhbz#1584663)
- storage: Move virStorageBackendFileSystemGetPoolSource (rhbz#1584663)
- tests: Introduce tests for storage pool xml to argv checks (rhbz#1584663)
- tests: Add storagepool xml test for netfs-auto (rhbz#1584663)
- stora