Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)

hivex
libguestfs
[1.44.0-9.0.2]
- libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755]

[1.44.0-9.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.44.0-9]
- Fix CVE-2022-2211 Denial of Service in --key parameter
resolves: rhbz#2101280

[1:1.44.0-8]
- Obsolete old libguestfs-benchmarking subpackage
resolves: rhbz#2091597

[1:1.44.0-7]
- Disable 5-level page tables when using -cpu max
resolves: rhbz#2084566
related: rhbz#2075424

[1:1.44.0-6]
- Backport support for -cpu max to allow RHEL 9 guests to be modified
resolves: rhbz#2075424

[1:1.44.0-5]
- Fix libguestfs failure with qemu 6.2, libvirt 7.10
resolves: rhbz#2035177

libguestfs-winsupport
[8.9-1]
- Rebase to ntfs-3g 2022.10.3
- Fixes: CVE-2022-40284
- resolves: rhbz#2236372

[8.8-1]
- Rebase to ntfs-3g 2022.5.17
- Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
resolves: rhbz#2127240 rhbz#2127248
(also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)

[8.6-1]
- Rebase to ntfs-3g 2021.8.22
- Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
resolves: rhbz#2004490

[8.2-1.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[8.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[8.0-4]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[8.0-3]
- Fix for CVE-2019-9755
(heap-based buffer overflow leads to local root privilege escalation)
resolves: rhbz#1698503

[8.0-2]
- Fix for ntfsclone crash (RHBZ#1601146).

[8.0-1]
- Rebase to 2017.3.23.
- Remove patches which are now upstream.
- Resynch with Fedora package.
- Enable all architectures for RHEL 8.

[7.2-2]
- Fix for handling guest filenames with invalid or incomplete
multibyte or wide characters
resolves: rhbz#1301593

[7.2-1]
- Rebase and rebuild for RHEL 7.2
resolves: rhbz#1240278

[7.1-6]
- Bump version and rebuild.
related: rhbz#1221583

[7.1-5]
- Enable aarch64 architecture.
resolves: rhbz#1221583

[7.1-4]
- Enable debuginfo support and stripping.
resolves: rhbz#1100319

[7.1-3]
- Add patches from Fedora package which add fstrim support.
resolves: rhbz#1100319

[7.1-2]
- New package for RHEL 7.1
- Rebase to ntfs-3g 2014.2.15
resolves: rhbz#1100319
- Change the package so it works with supermin5.
- Remove dependency on external FUSE.

[7.0-2]
- Resync against Rawhide package (ntfs-3g 2013.1.13).
- Drop HAL file since HAL is dead.
resolves: rhbz#819939

[7.0-1]
- New package for RHEL 7
resolves: rhbz#819939
- Resync against Rawhide package.

[1.0-7]
- Disable debuginfo package.
resolves: RHBZ#691555.

[1.0-6]
- Require libguestfs 1.7.17 (newer version in RHEL 6.1).
- Require febootstrap-supermin-helper instead of febootstrap
resolves: RHBZ#670299.

[1.0-5]
- Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429)

[1.0-4]
- Requires fuse-libs (RHBZ#599300).

[1.0-3]
- ExclusiveArch x86_64.

[1.0-2]
- Package Windows support for libguestfs.

libiscsi
libnbd
[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718

[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]
- New stable release 1.2.2.

[1.2.1-1]
- New stable release 1.2.1.

[1.2.0-1]
- New stable release 1.2.0.

[1.0.3-1]
- New upstream version 1.0.3.
- Contains fix for remote code execution vulnerability.
- Add new libnbd-security(3) man page.

[1.0.2-1]
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.

[1.0.1-2]
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.

[1.0.1-1]
- New stable version 1.0.1.

[1.0.0-1]
- New upstream version 1.0.0.

[0.9.9-2]
- Rebuilt for Python 3.8

[0.9.9-1]
- New upstream version 0.9.9.

[0.9.8-4]
- Fix nbdkit dependencies so we're actually running the tests.
- Add glib2-devel BR so we build the glib main loop example.
- Add upstream patch to fix test error:
nbd_connect_unix: getlogin: No such device or address
- Fix test failure on 32 bit.

[0.9.8-3]
- Bump and rebuild to fix releng brokenness.
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/

[0.9.8-2]
- Rebuilt for Python 3.8

[0.9.8-1]
- New upstream version 0.9.8.
- Package the new nbd_*(3) man pages.

[0.9.7-1]
- New upstream version 0.9.7.
- Add libnbd-ocaml(3) man page.

[0.9.6-2]
- Add all upstream patches since 0.9.6 was released.
- Package the ocaml bindings into a subpackage.

[0.9.6-1]
- New upstream verison 0.9.6.

[0.1.9-1]
- New upstream version 0.1.9.

[0.1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.1.8-1]
- New upstream version 0.1.8.

[0.1.7-1]
- New upstream version 0.1.7.

[0.1.6-1]
- New upstream version 0.1.6.

[0.1.5-1]
- New upstream version 0.1.5.

[0.1.4-1]
- New upstream version 0.1.4.

[0.1.2-2]
- Enable libxml2 for NBD URI support.

[0.1.2-1]
- New upstream version 0.1.2.

[0.1.1-1]
- Fix license in man pages and examples.
- Add nbdsh(1) man page.
- Include the signature and keyring even if validation is disabled.
- Update devel subpackage license.
- Fix old FSF address in Python tests.
- Filter Python provides.
- Remove executable permission on the tar.gz.sig file.
- Initial release.

libtpms
libvirt-dbus
[1.3.0-2.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.3.0]
- Res