qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.7) quantal-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via MAC address table update
    - debian/patches/CVE-2014-0150.patch: fix overflow in hw/virtio-net.c.
    - CVE-2014-0150
  * SECURITY UPDATE: denial of service and possible code execution via
    smart self test counter
    - debian/patches/CVE-2014-2894.patch: correct self-test count in
      hw/ide/core.c.
    - CVE-2014-2894
 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 25 Apr 2014 16:36:17 -0400

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.6) quantal-security; urgency=medium

  * SECURITY UPDATE: privilege escalation via REPORT LUNS
    - debian/patches/CVE-2013-4344.patch: support more than 256 LUNS in
      hw/scsi-bus.c, hw/scsi.h.
    - CVE-2013-4344
  * SECURITY UPDATE: denial of service in qdisk PV disk backend
    - debian/patches/CVE-2013-4375.patch: mark ioreq as mapped before
      unmapping in error case in hw/xen_disk.c.
    - CVE-2013-4375

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 28 Jan 2014 08:31:54 -0500

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.5) quantal-proposed; urgency=low

  * debian/control and qemu-kvm.postinst: remove any g:--- acl on /dev/kvm
    (left over from udev-acl).  (LP: #1057024)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 17 Jul 2013 10:23:13 -0500

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.4) quantal-proposed; urgency=low

  * qemu-kvm.preinst: add kvm group if not present.  (LP: #1103022)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Fri, 22 Mar 2013 10:14:18 -0500

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.3) quantal-proposed; urgency=low

  [ Nikolaus Rath ]
  * fix-usb-passthrough.patch: fix problems with accessing some host
    USB devices (Closes: 683983) (LP: #1033727)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Tue, 29 Jan 2013 22:26:54 -0600

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.2) quantal-security; urgency=low

  * SECURITY UPDATE: guest denial of service and possible code execution
    via e1000 large packets
    - debian/patches/CVE-2012-6075.patch: properly discard oversize packets
      in hw/e1000.c.
    - CVE-2012-6075

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 15 Jan 2013 09:22:12 -0500

qemu-kvm (1.2.0+noroms-0ubuntu2.12.10.1) quantal-proposed; urgency=low

  [ Serge Hallyn ]
  * debian/qemu-kvm.postinst: use udevadm trigger to change /dev/kvm perms as
    recommended by Steve Langasek (LP: #1057024)
  * apply debian/patches/nbd-fixes-to-read-only-handling.patch from upstream to
    make read-write mount after read-only mount work.  (LP: #1077838)
  * make qemu-kvm depend on udev (LP: #1080912)

  [ Robert Collins ]
  * Fix upstart job to succeed if ksm settings can't be altered in the same way
    other settings are handled. (LP: #1078530)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Mon, 19 Nov 2012 09:15:42 -0600

qemu-kvm (1.2.0+noroms-0ubuntu2) quantal-proposed; urgency=low

  * debian/rules: drop building of mpc8544ds from pc-bios (as it's no longer
    there) on powerpc to fix FTBFS.

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Mon, 24 Sep 2012 14:14:27 -0500

qemu-kvm (1.2.0+noroms-0ubuntu1) quantal; urgency=low

  * merge upstream v1.2.0  (LP: #1052932) (LP: #1040033)
    - debian/rules: remove --enable-kvm-device-assignment - configure switch
      no longer supported
    - remaining patches:
      . 02_use_usr_share_kvm_fixed.patch
      . 04_use_etc_kvm_kvm-ifup.patch
      . disable-hpet-for-tcg.patch
      . use-libexecdir.patch
      . ubuntu/larger_default_ram_size.patch
      . ubuntu/fallback-to-tcg.patch - ported to new code
      . ubuntu/dont-try-to-hotplug-cpu.patch
      . ubuntu/expose_vmx_qemu64cpu.patch
      . ubuntu/fix-vmware-vga-negative-vals
      . ubuntu/99-allow-loading-u-boot-initrd-images.patch

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 12 Sep 2012 10:46:28 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu11) quantal; urgency=low

  * Cherrypick three patches from upstream
    - kvm-i8254-fix-conversion-of-in-kernel-to-userspace-state
    - kvm-i8254-cache-kernel-clock-offset-in-KVMPITState
    - kvm-i8254-finish-time-conversion-fix
    to fix time passing too quickly in some guests.  (LP: #1046771)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Thu, 06 Sep 2012 10:06:41 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu10) quantal; urgency=low

  * debian/qemu-kvm.modprobe: set nested=1 at module load.  (LP: #1040230)
  * remove patch ubuntu/define_AT_EMPTY_PATH, the real fix is now in eglibc.

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Thu, 23 Aug 2012 11:10:53 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu9) quantal; urgency=low

  [ Michael Tokarev ]
  * added two patches from upstream qemu-kvm/stable-1.1 branch:
    qemu-kvm-Add-missing-default-machine-options.patch
    qemu-kvm-virtio-Do-not-register-mask-notifiers-witho.patch
    (Closes: #679788) (LP: #1029201)

  [ Serge Hallyn ]
  * remove ubuntu/CVE-2011-2212-virtqueue-indirect-overflow.patch
    patch, which was actually fixed in qemu 0.15 by 
    "virtio: fix indirect descriptor buffer overflow"  (Thanks to
    Michael Tokarev for pointing that out)

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Thu, 26 Jul 2012 10:31:53 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu8) quantal; urgency=low

  * debian/qemu-kvm.upstart: don't fail if the kernel modules are not
    found.

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 11 Jul 2012 17:18:06 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu7) quantal; urgency=low

  * ubuntu/99-ppc-increase-usability-of-ppce500-pci.patch: Allows more than
    2 PCI devices on e500 type systems.
  * Enable ppc64-softmmu target on PowerPC as well

 -- Ben Collins <bcollins@ubuntu.com>  Thu, 28 Jun 2012 21:50:30 -0400

qemu-kvm (1.1~rc+dfsg-1ubuntu6) quantal; urgency=low

  * Add libfdt-dev [powerpc] to build-deps
  * Force --enable-fdt for powerpc builds
  * 99-allow-loading-u-boot-initrd-images.patch: Add capability to load
    initrd's in U-Image format.
  * 99-increase-u-boot-gunzip-size.patch: By default, qemu only loads
    U-Images less than or equal to 8 Megs, so increase it to 16 Megs.

 -- Ben Collins <bcollins@ubuntu.com>  Thu, 28 Jun 2012 01:09:19 -0400

qemu-kvm (1.1~rc+dfsg-1ubuntu5) quantal; urgency=low

  * Because PPC is a true KVM target, we should be building for it, rather
    than i386/x86-64 on that architecture. However, this package is still
    trying to build the x86 targets on other non-x86 architectures. I did
    not fix this for aything other than ppc because I don't know if those
    other archs are actually KVM enabled, nor can I properly test the build
    and execution on those archs.
  * Fixup for a proper PPC build:
    - debian/control: Make description less x86-centric
    - debian/rules: Use ppc-softmmu as the target on powerpc
    - debian/rules: Enable blobs for some device tree files to be installed
    - debian/*.links: Move some x86-centric links to rules file and create
      proper links for qemu-system-ppc.

 -- Ben Collins <bcollins@ubuntu.com>  Fri, 22 Jun 2012 22:42:15 -0400

qemu-kvm (1.1~rc+dfsg-1ubuntu4) quantal; urgency=low

  * qemu-kvm.post{inst,rm}: don't invoke-rc.d qemu-kvm
  * debian/rules: remove --noscripts from dh_installinit

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 20 Jun 2012 19:18:24 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu3) quantal; urgency=low

  * debian/rules:
    - fix kvm version in dh_gencontrol line (ours is higher than debian's)
    - define DEB_HOST_ARCH and DEB_HOST_ARCH_CPU
    - fix specification of --disable-kvm for arm and powerpc
    - set --{en,dis}able-kvm-device-assignment next to --{en,dis}able-kvm
    - dont' build pc-bios on non-x86, don't build bamboo on ppc
    - create the vgabios and seabios links (for x86 only)
  * debian/qemu-common.links: don't create vgabios/seabios links here
    (they're only for x86)
  * debian/optional-features: comment out --enable-kvm-device-assignment
  * ubuntu/kvm_Enable_use_of_kvm_irqchip_in_kernel_in_hwlib_code - fix
    powerpc and arm (--disable-kvm) builds.

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 20 Jun 2012 10:26:40 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu2) quantal; urgency=low

  * don't build against usbredir (not in main)
    - debian/optional-features: use --disable-usb-redir
    - debian/control: remove libusbredirhost-dev from build-deps

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Wed, 20 Jun 2012 07:38:11 -0500

qemu-kvm (1.1~rc+dfsg-1ubuntu1) quantal; urgency=low

  * Merge from debian.  Remaining changes:
    - update maintainer
    - debian/optional-features: disable libiscsi, vde and spice
    - debian/control:
      * remove libiscsi-dev, spice and vde2 depends and build-deps (not in main)
      * remove qemu-keymaps depends (offered by qemu-common, and conflicts with
        binary package in universe from qemu-linaro)
      * remove ipxe-qemu depends for qemu-kvm
      * qemu-kvm: add qemu-common depends, tie qemu-utils depends to same version,
        set architecture any, add Provides: qemu
      * remove qemu-kvm-dbg: dbgsym will end up in ddebs anyway
      * add qemu-utils package, which in debian comes from qemu source package
      * add qemu-common package (doesn't exist in debian, provides shared bits
        used by qemu-linaro)
      * add qemu transitional package, qemu-common, and substitude our own kvm
        transitional package (more architectures)
    - debian/rules:
      * change --audio-drv-list order to make pa the default (see lp #304649)
      * add --enable-docs
      * remove powerpc section (for now)
      * add i386 and linux-user to QEMU_TARGET
      * remove override_dh_strip
      * set confsuffix to /qemu
      * add -fno-var-tracking for arm
      * set --disable-kvm for arches other than amd64, i386
      * install roms, bios', and utils into right package
      * build pc-bios/optionrom
      * install kvm-if{up,down} as /etc/qemu-if*
      * create directory links (/etc/kvm, /usr/share/kvm, /usr/share/qemu-kvm)
      * install qemu-kvm apport hook
      * set DEB_BUILD_HARDENING
      * set options for handling DEB_BUILD_OPTIONS=parallel=N
      * add --no-restart-on-upgrade to dh_installinit args
      * do a make install in override_dh_auto_install
      * remove manual install of kvm binary
    - qemu-kvm.postinst and prerm: remove the /usr/share/kvm/keymaps logic
    - add
      * qemu-kvm.links
      * qemu-utils.dirs, qemu-utils.links
      * qemu-common.install, qemu-common.doc, qemu-common.links, qemu-common.dirs
      * source_qemu-kvm.py (apport hook)
      * qemu-kvm.upstart and qemu-kvm.default
    - debian/kvm-ifup: source qemu-kvm.default and honor its $TAPBR
    - debian/kvm-ifdown: keep old ubuntu version
    - push (refreshed) ubuntu patches:
      * ubuntu/CVE-2011-2212-virtqueue-indirect-overflow.patch
      * ubuntu/define_AT_EMPTY_PATH.patch (until LP: 1010069 is fixed)
      * ubuntu/dont-try-to-hotplug-cpu.patch
      * ubuntu/expose_vmx_qemu64cpu.patch
      * ubuntu/fallback-to-tcg.patch
      * ubuntu/fix-vmware-vga-negative-vals
      * ubuntu/larger_default_ram_size.patch

 -- Serge Hallyn <serge.hallyn@ubuntu.com>  Fri, 15 Jun 2012 08:06:23 -0500

qemu-kvm (1.1~rc+dfsg-1) experimental; urgency=low

  * new upstream prerelease: 1.1  (Closes: #652329, #672287)
    (This is not official release yet, it is based on 1.1-rc4 plus a few fixes
     from upstream stable-1.1 git branch.  The release isn't out due to some
     last-minute regression issue, once the regression will be dealt with
     we'll release 1.1 into unstable)
    Removed all bugfix patches (integrated upstream)
    Refreshed the configuration (and removed 03_use_etc_kvm_not_etc_qemu.patch)
  * refresh debian/optional-features, mention/enable new configure switches
  * build-depend on libcap-dev for now, to build in virtfs support.
    Actual helper should come from qemu, and libcap-dev only needed to build it,
    but configure script does not enable virtfs unless -lcap works.
  * build-depend on libusbredirhost-dev, enable network usb redirection
  * depend on seabios >= 1.7.0~, for kvmvapic.bin
  * refreshed debian/patches/resurrect-extboot.diff
  * patches/disable-hpet-for-tcg.patch (taken from Ubuntu) (Closes: #668186)
  * patches/use-libexecdir.patch (+debian/rules) - qemu-bridge-helper is
    in /usr/lib not /usr/libexec.

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 26 May 2012 22:39:46 +0400

qemu-kvm (1.0+dfsg-11) unstable; urgency=low

  * add build dependency on libjpeg-dev and libpng-dev
  * show config.log in case ./configure fails
  * bump Standards-Version to 3.9.3 (no changes needed)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 17 Apr 2012 14:08:34 +0400

qemu-kvm (1.0+dfsg-10) unstable; urgency=low

  * add a patch from upstream:
    slirp:-signal-free-input-buffer-space-to-io-thread.patch
    (Closes: #667604)
  * add a forgotten-by-upstream patch to resolve netbsd PCI issues:
    pci-fix-corrupted-pci-conf-index-register-by-unaligned-write.patch
    (Closes: #653473)
  * change package version string format:
     - QEMU emulator version 1.0 (Debian qemu-kvm 1.0+dfsg-9)
     + QEMU emulator version 1.0 (qemu-kvm-1.0+dfsg-10, Debian)
    because libvirt expects to find string " (qemu-kvm-" in the
    version output, and does not enable kvm-specific features
    features if this prefix is not found.  Strictly speaking it
    is libvirt bug, especially in context of qemu and qemu-kvm
    merge, but we'll work around it here.  Only one visible
    result of the "wrong" version number so far is dramatic
    (~20x) reduction of speed of vhost-net-accelerated networking.
    Big thanks to Hans-Kristian Bakke (#668594) for the help in
    debugging this, he provided his machine to me for testing.
    (Closes: #668594, #665046)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 17 Apr 2012 12:11:25 +0400

qemu-kvm (1.0+dfsg-9) unstable; urgency=low

  * fix ipxe dependency (Closes: #659010, #585170)
  * fix CFLAGS=`` construct to use $(shell ) instead
    (chokes on older make, see #660133)
  * stop shipping 05_report_debian_package_version.patch
    and use --with-pkgversion configure option instead
  * depend on vgabios >= 0.6c-3~ not 0.6c-3, to assist backporting
  * apply qemu-1.0.1.diff -- difference from qemu 1.0 to qemu 1.0.1
    from git, except of version change (this includes CVE-2012-0029 fix)

 -- Michael Tokarev <mjt@tls.msk.ru>  Mon, 27 Feb 2012 23:47:59 +0400

qemu-kvm (1.0+dfsg-8) unstable; urgency=low

  * Depends on ipxe-qemu or old ipxe (Closes: #658853, #585170)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 07 Feb 2012 00:59:20 +0400

qemu-kvm (1.0+dfsg-7) unstable; urgency=low

  * Force-enable optional features in ./configure args which are listed
    as build-dependencies, in order to catch things like broken
    dependency which makes corresponding optional feature to be omitted.
    (Closes: #658169)
    Placed all optional features into debian/optional-features file
    instead of hardcoding them in debian/rules, to be able to comment
    on each of them.
    Also rearrange build-deps and sort them alphabetically.
  * Removed debian/gbp.conf (unused)
  * Converted debian/rules to use dh.  Set debian/compat to 8 (and build-depend
    on debhelper >= 8).  This also fixes lintian warnings about missing targets.
  * Added two patches for manpage generation to recognize/use UTF8.
    (Closes: #655911)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 02 Feb 2012 12:45:28 +0400

qemu-kvm (1.0+dfsg-6) unstable; urgency=high

  [ Michael Tokarev ]
  * patch fix-vnc-memory-corruption-with-width=1440.diff from
    Gerd Hoffman, fixing guest-triggerable memory corruption
    in vnc with one of standard display sizes (1440x1050 or
    1440x900 or others -- these can be set by guest if run
    with -vga {std|vmware}.  Closes: #608756.
  * Build-depend on libvdeplug-dev | libvdeplug2-dev, not just
    libvdeplug2-dev, to cope with the package rename (#658082)
  * Urgency is high again to help previous security fix to enter
    wheezy (which has stalled due to #658082 above)

  [ Moritz Muehlenhoff ]
  * enable usage of dpkg-buildflags for CFLAGS and LDFLAGS
    (this enables hardened build too)  (Closes: #657867)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 31 Jan 2012 13:09:16 +0400

qemu-kvm (1.0+dfsg-5) unstable; urgency=high

  * urgency high due to security fix
  * e1000-bounds-packet-size-against-buffer-size-CVE-2012-0029.diff
    patch from upstream to fix CVE-2012-0029 (Closes: #657529)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 27 Jan 2012 00:42:11 +0400

qemu-kvm (1.0+dfsg-4) unstable; urgency=low

  * added Breaks: libvirt0 (<< 0.9.8-2~) since older versions did not
    parse 1.0 version number corrrectly (Closes: #655024)

 -- Michael Tokarev <mjt@tls.msk.ru>  Thu, 19 Jan 2012 19:20:18 +0400

qemu-kvm (1.0+dfsg-3) unstable; urgency=low

  * ship /etc/kvm/target-x86_64.conf (Closes: #652281)
  * resurrect extboot support which has been removed in qemu-kvm 1.0
    (debian/patches/resurrect-extboot.diff).  (Closes: #652447)
  * build-depend on libiscsi-dev (which has been packaged for Debian
    a few days ago) to enable iscsi support

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 17 Dec 2011 15:03:20 +0400

qemu-kvm (1.0+dfsg-2) unstable; urgency=low

  * mention: (closes: #647312)
    for 1.0 upload
  * upload to unstable

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 16 Dec 2011 12:12:38 +0400

qemu-kvm (1.0+dfsg-1) experimental; urgency=low

  * new upstream release (1.0) (Closes: #624070, #647312)
  * removed obsolete patches, refreshed old patches
  * --disable-smartcard-nss && --disable-smartcard - the
    linkage requiriments (nspr) is too heavy and the link/library
    needs some work still (linking to too many unused libs)
  * require seabios >>1.6.3 (Closes: #648853)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 04 Dec 2011 19:26:40 +0400

qemu-kvm (0.15.1+dfsg-1) unstable; urgency=low

  * new upstream bugfix release 0.15.1
  * refreshed debian/patches/04_use_etc_kvm_kvm-ifup.patch
  * added two-pieces fix for CVE-2011-3346:
    scsi-disk-commonize-iovec-creation-between-reads-and-writes-103b40f51e-CVE-2011-3346.diff
    scsi-disk-lazily-allocate-bounce-buffer-7285477ab1-CVE-2011-3346.diff
    backported from upstream (closes: #646118)
  * remove extra/default stuff from debian/gbp.conf
  * remove many unneeded build-dependencies from debian/control
  * bump Standards-Version to 3.9.2 (no changes needed)
  * add debhelper tags to qemu-kvm.{preinst,postrm} or else lintian complains
  * removed a typo in qemu-kvm.init that referenced /dev/.udev but
    in incorrect way so it never actually worked (Closes: #644324)
  * upload to unstable (closes: #645976)

 -- Michael Tokarev <mjt@tls.msk.ru>  Fri, 21 Oct 2011 17:06:43 +0400

qemu-kvm (0.15.0+dfsg-2) experimental; urgency=low

  * applied build-move-QEMU_INCLUDES-before-QEMU_CFLAGS-76dc3cf82c.diff
    from upstream (-stable) to fix build breakage with spice installed
  * add spice build-dependency (libspice-server-dev and libspice-protocol-dev)
  * disable guest-agent for now, it needs to go into separate package

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 30 Aug 2011 00:07:30 +0400

qemu-kvm (0.15.0+dfsg-1) experimental; urgency=low

  * Build-Depend on librbd-dev (in addition to librados-dev)
  * update to 0.15.0 final release

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 10 Aug 2011 01:36:33 +0400

qemu-kvm (0.15.0~rc1+dfsg-1) experimental; urgency=low

  * new upstream (release candidate) (closes: #623858, #636105)
  * remove extra/default stuff from debian/gbp.conf
  * remove many unneeded build-dependencies from debian/control
  * bump Standards-Version to 3.9.2 (no changes needed)
  * add build-dependency on libglib2.0-dev
  * remove unneded patches, refresh needed patches, refresh pxe rom names
  * perform build in a build/ subdir for easier cleaning
  * set Maintainer: to me and add Jan Lübbe to Uploaders.
    Thank you Jan and Guido for all the hard work!

 -- Michael Tokarev <mjt@tls.msk.ru>  Sun, 31 Jul 2011 18:31:33 +0400

qemu-kvm (0.14.1+dfsg-4) unstable; urgency=low

  * switch from etherboot-qemu to ipxe (closes: #634040, #612775, #582434)
  * explicitly chown/chmod /dev/kvm in postinst if owned by root:root,
    for new installs when udev hasn't picked up new rules yet
    (closes: #607391)

 -- Michael Tokarev <mjt@tls.msk.ru>  Tue, 26 Jul 2011 11:13:42 +0400

qemu-kvm (0.14.1+dfsg-3) unstable; urgency=high

  * virtio-fix-indirect-descriptor-buffer-overflow-CVE-2011-2212
    fixes a guest-triggerable buffer overflow in virtio handling
    (closes: #632987)
  * os-posix-set-groups-properly-for--runas-CVE-2011-2527
    clears supplementary groups for -runas (closes: #633669)
  * two security updates so urgency is high

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 13 Jul 2011 00:59:47 +0400

qemu-kvm (0.14.1+dfsg-2) unstable; urgency=high

  * virtio: guard against negative vq notifies -- fixes a guest-triggerable
    bug in virtio implementation (CVE-2011-2512) (Closes: #631975)
    Urgency is high due to security fix.

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 29 Jun 2011 00:53:54 +0400

qemu-kvm (0.14.1+dfsg-1) unstable; urgency=low

  * new upstream 0.14.1 stable/bugfix release
    (closes: #616159, #624177)
  * remove vgabios package entirely finally, when it's properly
    packaged in debian (and depend on it) (Closes: #489442)
  * ship vgabios.bin link too, for now.  It's not used but helps for
    older versions of qemu-kvm.
  * add $(QEMU_KVM_CONFIGURE_OPTIONS) to ./configure flags, to simplify
    local/custom builds.  Does not affect Debian qemu-kvm build.
    Also fix whitespace in that area in debian/rules
  * move init.d script to rcS.d and don't run it on stop
    (Closes: #611952, #540686)
  * remove isa-bus:-Remove-bogus-IRQ-sharing-check-ee951a.diff
    (upstream)
  * build-depend on librados-dev to enable rbd support
  * update kvm-ifup to be a bit more accurate and to warn about
    problem cases.  (closes: #619300, #624006)
  * ignore-pci-unplug-requests-for-unpluggable-devices-CVE-2011-1751.diff
    (closes: #627448)
  * fix-crash-in-migration-32-bit-userspace-on-64-bit-host-51b0c6065a.diff
    (closes: #625571)
  * set-$SDL_VIDEODRIVER=x11-on-Linux-to-prevent-sudo-kvm-from-fighting-for-video-1de9756b97
    (closes: #604844)

 -- Michael Tokarev <mjt@tls.msk.ru>  Sat, 28 May 2011 13:43:40 +0400

qemu-kvm (0.14.0+dfsg-1~tls) unstable; urgency=low

  * 0.14.0 release:
   - much improved vga speed (closes: #575720, #574988)
   - other bugs (closes: #574063, #603424, #604034)
  * removed a ton of old patches that went upstream
  * refreshed some patches to apply cleanly to new code
  * introduced vgabios (0.6c+ca056d8e77) patch and use that
    instead of kvm/vgabios/.  Now we can use separate vgabios package
    (bios files changed. Now we don't ship vgabios.bin anymore)
  * added fix-configure-bin-symlinks.patch to fix ./configure in
    case all blobs in the source are removed
  * don't ship kvmtrace anymore (does not exist upstream?)
  * update debian/rules for the new package layout (esp. "clean" target)
  * enable hda (guest) audio device
  * apply isa-bus:-Remove-bogus-IRQ-sharing-check-ee951a.diff
    from upstream. this makes >4 com ports usable again
    (also removes old isa-refine-irq-reservations.patch)
  * use external seabios package and depend on it (>> 0.6.1.2)
  * move bridge-utils and iproute from Depends to Recommends
  * build-depend on xfslibs-dev (for xfs-specific ioctls, not for the library)
  * switch to 3.0 (quilt) format (and remove clean-patched target)
  * removed 06_no_system_linux_kvm_h.patch (kvm/* isn't used anymore)
  * depend on qemu-utils >> 0.14, and deprecate kvm-img, kvm-nbd and kvm-io
    (provide script wrappers for them that prints a warning and executes a
    real tool from qemu-utils)

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 23 Feb 2011 13:40:53 +0300

qemu-kvm (0.13.0+dfsg-2) experimental; urgency=low

  * fix /usr/share/kvm/keymaps dir=>symlink mess after dpkg:
    - remove the symlink when downgrading
    - handle downgrade failures (abort-upgrade)
  * two patches from upstream git to fix alsa audio issues:
    - fix-100%-CPU-load-when-idle-with-ALSA.diff
    - issue-snd_pcm_start-when-capturing-audio.diff

 -- Michael Tokarev <mjt@tls.msk.ru>  Wed, 10 Nov 2010 09:29:59 +0300

qemu-kvm (0.13.0+dfsg-1) experimental; urgency=low

  [ Michael Tokarev ]
  * first try at 0.13.0 (closes: #597508)
  * patches:
   o 01_use_bios_files_in_usr_share_kvm.patch - removed, use --datadir
   o 02_use_usr_share_kvm_fixed.patch (different function in different file)
   o 03_use_etc_kvm_not_etc_qemu.patch (new, for new conffiles)
   o 05_report_debian_package_version.patch -- show debian package version too
   o included upstream:
    - revert-sdlaudio:-make-it-suck-less.diff
    - 573439-fail-to-set-hdd-serial-number.diff
    - be_more_specific_in_-mem-path_error_messages.diff
    - give-useful-error-messages-when-tap-open-fails.diff
    - document--incoming-option.diff
    - sdl-do-not-disable-screensaver.diff
    - fix-curses-return-key-when-using--k.diff
    - vmstate:-fix-breakage-by-7e72abc382b700a72549e8147bdea413534eeedc.diff
    - add-support-for-GET-EVENT-STATUS-NOTIFICATION.diff
    - upstream-stable02-fix-CMOS-info-for-drives-defined-with--device.diff
    - upstream-stable01-make-PIIX-and-ISA-IDE-init-functions-return-the-qdev.diff
    - CVE-2010-2784-fix-segfault-in-mmio-subpage-handling-code.diff
  * updated seabios (seabios-0.6.0-54-g17d3e46.diff, per EXTERNAL_DEPENDENCIES
  * seabios-fix-virtio-blk-failure-after-reboot.patch
  * depend on etherboot-qemu package instead of copying etherboot roms
    at build time. (closes: #584074, #581356, #588940)
  * depend on qemu-keymaps package instead of providing our own keymaps
  * depend on qemu-utils package instead or providing our out utils
  * many small changes for debian/rules, simplifications/cleanups
  * build-depend on texinfo - it uses makeinfo to build docs
  * build-depend on libattr1-dev, to bring in virtfs (9p) support
  * don't ship roms/seabios/src/acpi-dsdt.hex (generated file)
    and remove it in clean target
  * vmmouse:-adapt-to-mouse-handler-changes.diff: fix guest mouse breakage
  * [54d2dd4] Imported Upstream version 0.13.0+dfsg
  * [1aab9fe] Imported Upstream version 0.13.0+dfsg

  [ Guido Günther ]
  * postinst: when switching to qemu's keymaps we changed from a dir to a
    symlink, so help dpkg along.

 -- Guido Günther <agx@sigxcpu.org>  Thu, 04 Nov 2010 21:45:08 +0100

qemu-kvm (0.12.5+dfsg-3) unstable; urgency=medium

  [ Michael Tokarev ]
  * CVE-2010-2784-fix-segfault-in-mmio-subpage-handling-code.diff
    (closes: #594478)

 -- Jan Lübbe <jluebbe@debian.org>  Sat, 04 Sep 2010 19:29:59 +0200

qemu-kvm (0.12.5+dfsg-2) unstable; urgency=low

  [ Michael Tokarev ]
  * patch from upstream: add-support-for-GET-EVENT-STATUS-NOTIFICATION.diff
    (closes: #593144)
  * two patches from upstream qemu/stable-0.12:
    upstream-stable01-make-PIIX-and-ISA-IDE-init-functions-return-the-qdev.diff
    upstream-stable02-fix-CMOS-info-for-drives-defined-with--device.diff
    (closes: #588739)
  * revert-all-bdrv_write_sync-changes.diff - this patch reverts the changes
    which went into 0.12.5 upstream and make all metadata writes (for qcow&Co)
    syncronous.  Yes it's more correct, but the resulting write speed is
    insanely slow and makes all image formats except raw unusable.
    (closes: #594069)

 -- Jan Lübbe <jluebbe@debian.org>  Wed, 25 Aug 2010 13:15:11 +0200

qemu-kvm (0.12.5+dfsg-1) unstable; urgency=low

  [ Michael Tokarev ]
  * new upstream bugfix/minor release, with many bugfixes
    incorporated:
     block:-fix-sector-comparism-in-multiwrite_req_compare.diff
     pci:-irq_state-vmstate-breakage.diff
    (closes: #589009, #582493, #580649)
  * add /etc/kvm/kvm-ifdown (dummy) script (closes: #583590)
  * add seabios-ps2-fixes.diff (two patches from seabios git)
    (closes: #591266)
  * sdl-do-not-disable-screensaver.diff (closes: #578672)
  * fix-curses-return-key-when-using--k.diff (closes: #583478)
  * vmstate:-fix-breakage-by-7e72abc382b700a72549e8147bdea413534eeedc.diff
    (fixes cirrus vga breakage on migration)
  * added qdev-device-use.txt documentation file from upstream
  * actually ship debian/changelog.upstream-qemu-kvm

  [ Jan Lübbe ]
  * Add Michael Tokarev as Uploader
  * Update Standards-Version to 3.9.1 (don't reference BSD license from
    common-licenses)

 -- Jan Lübbe <jluebbe@debian.org>  Mon, 09 Aug 2010 14:23:37 +0200

qemu-kvm (0.12.4+dfsg-1) unstable; urgency=low

  [ Michael Tokarev ]
  * New upstream minor/stable release 0.12.4, incorporating
    the following patches:
     avoid_creating_too_large_iovecs_in_multiwrite_merge.patch
     net:-remove-broken-net_set_boot_mask-boot-device-validation.diff
     block:-free-iovec-arrays-allocated-by-multiwrite_merge.diff
     bail-out-when-VCPU_CREATE-fails.diff
  * add madv_mergeable-for-old-kernheaders-hack.diff, mostly
    to help bpo builds (it is to enable KMS even when compiled
    against old kernel headers, when running on recent-enough
    kernel)
  * fix kvm transitional package to have Priority: extra
  * also fix kvm transitional package to properly run with reportbug,
    and simplify the bug-script and use dh_bugfiles to install them.
  * adedd isa-refine-irq-reservations.patch from Gerd Hoffmann
    (closes: #574051)
  * added be_more_specific_in_-mem-path_error_messages.diff trivial 
    patch to be more specific when throwing errors. (closes: #574073)
  * bump debhelper build-depend version to 7.2.3 due to dh_bugfiles.
  * net:-remove-broken-net_set_boot_mask-boot-device-validation.diff
    (to let it to boot from network using new -netdev syntax, cherry-
    picked from stable) (closes: #575628)
  * block:-free-iovec-arrays-allocated-by-multiwrite_merge.diff
    to fix a memory leak in virtio-blk implementation
  * rehash 04_use_etc_kvm_kvm-ifup.patch - apparently the #defines
    are now in two places, remove one of them and patch another
  * bail-out-when-VCPU_CREATE-fails.diff - new patch to make kvm to behave
    a bit nicely if vcpu_create fails: before it were just segfaulting.
    (closes: #558029)
  * give-useful-error-messages-when-tap-open-fails.diff: when manipulation
    of /dev/net/tun fails, give some more useful error messages.
    (closes: #578154)
  * document -incoming option (document--incoming-option.diff).
    (closes: #565573)
  * (preliminary) fix for usb keyboard keymap, usbkbd-menu-logo-keys.diff.
    (closes: #578846)

 -- Jan Lübbe <jluebbe@debian.org>  Tue, 18 May 2010 22:43:54 +0200

qemu-kvm (0.12.3+dfsg-4) unstable; urgency=low

  [ Michael Tokarev ]
  * added patch from upstream, ff5414990645653bf43bf64adfc1ca77ffb9edcb,
    revert-sdlaudio:-make-it-suck-less.diff (closes: #572943)
    Note that this is only relevant to sdl audio (QEMU_AUDIO_DRV=sdl)
  * don't report system dmi information in the bugreports anymore, it
    serves almost no useful purpose these days, much less than previously.
    VMX/SVM is either enabled or not, and if it is not enabled, kvm module
    will warn user about this fact in dmesg during load.
    (closes: #572930, #572924)
  * switch back to vgabios as shipped in upstream tarball in kvm/vgabios.
    I overlooked it, thinking it went away together with seabios as
    both roms/seabios and roms/vgabios are empty in upstream, but vgabios
    has never been removed.  So we're back at using it.
    Big thanks to Bjørn Mork for the hard work he did finding bugs in the
    version we shipped in 0.12.3+dfsg-2, which is wrong and the work
    should have not been required.  But it helped finding all the pieces
    finally. (closes: #572991)
  * build-depend on linux-libc-dev >= 2.6.32, to enable KSM (Kernel 
    Samepage Merge) and to ensure we'll not have spurious preadv()
    problems
  * build-depend on libaio-dev to compile in aio support
    (which does not do any harm if not explicitly enabled)
  * fix cleanups of old conffiles in preinst. (closes: #573280)
  * include 573439-fail-to-set-hdd-serial-number.diff - a fix by
    Kouichi ONO broken hdd serial number support (closes: #573439)

 -- Jan Lübbe <jluebbe@debian.org>  Thu, 11 Mar 2010 17:15:31 +0100

qemu-kvm (0.12.3+dfsg-3) unstable; urgency=low

  [ Michael Tokarev ]
  * fix number of jobs for seabios build to 1 (-j1)
    or else it breaks parallel builds
  * Ctrl-Alt-f for fullscreen is fixed in 0.12.3 (closes: #559086).
  * added avoid_creating_too_large_iovecs_in_multiwrite_merge.patch
    that fixes spontaneous I/O errors in guests under load.

 -- Jan Lübbe <jluebbe@debian.org>  Sun, 07 Mar 2010 12:45:30 +0100

qemu-kvm (0.12.3+dfsg-2) unstable; urgency=low

  [ Jan Lübbe ]
  * Build qemu-kvm-dbg and kvm packages only on i386 and amd64.

  [ Michael Tokarev ]
  * build seabios and vgabios with verbose logging

 -- Jan Lübbe <jluebbe@debian.org>  Sat, 06 Mar 2010 16:25:45 +0100

qemu-kvm (0.12.3+dfsg-1) unstable; urgency=low

  [ Michael Tokarev ]
  * New Upstream Version 0.12. (closes: #568804)
    (Apparently closes: #570245)
  * update list of files to remove for DFSG,
    and reorganize the procedure a bit
  * add sources for vgabios and seabios as patches from qemu-0.12.3.tar.gz
    (since qemu-kvm-0.12.x.tar.gz does not have them).  For now we can't use
    an external package (#489442) because qemu(-kvm) is too closely tied to
    bios versions and the risk to get a non-working system with external
    packages is still too high.
  * ship kvm transitional package; set version number for it so it will
    be higher than real kvm, and conflict/replace that old kvm in qemu-kvm.
    (closes: #565547)
  * remove some irrelevant patches (10-ksm-support, 07_set_sdl_title,
    09_qemu-fix-qcow2-backing-file-with-virtio,
    from-debian-qemu/22_net_tuntap_stall)
  * remove/backup /etc/init.d/kvm in preinst, so that only one startup
    script will provide kvm service, and also remove other kvm conffile
    leftovers. (closes: #557766)
  * split get-orig-source rule into two (tarball + dfsg)
  * update Standards-Version to 3.8.4 (no changes needed)

  [ Jan Lübbe ]
  * Build-Depend on python for seabios

 -- Jan Lübbe <jluebbe@debian.org>  Sat, 06 Mar 2010 13:42:46 +0100

qemu-kvm (0.11.1+dfsg-1) unstable; urgency=low

  [ Jan Lübbe ]
  * New upstream release
  * Provide kvm from qemu-kvm (closes: #558026)

  [ Michael Tokarev ]
  * clean up kvm/userspace in `clean' target or else the package
    does not build twice in a row (closes: #527371).
    Also add more workarounds to the clean target, namely,
    clean up kvm/user/test/lib from .*.d files and remove
    generated qemu-monitor.texi
  * fix /etc/kvm/kvm-ifup script (missing {} in awk), thanks to
    Andrea Zagli for the fix (closes: #560436)
  * check in /etc/kvm/kvm-ifup that we actually found default route
    interface and that it's actually a bridge
  * handle etherboot-5.4.4 which moved roms from /usr/share/etherboot
    to /usr/lib/etherboot and actually provided virtio boot rom.  Thanks
    to John Morrissey for the fix and patch. (closes: #522179).

  [ Jan Lübbe ]
  * Remove NAME="%k" from udev rule (closes: #559300)

  [ Guido Günther ]
  * add ksm support

 -- Jan Lübbe <jluebbe@debian.org>  Mon, 11 Jan 2010 14:48:32 +0100

qemu-kvm (0.11.0+dfsg-1) unstable; urgency=low

  * Package qemu-kvm (stable series) instead of kvm (snapshots)
  * Simplify the packaging, remove support for external module source
  * Move old debian/changelog to debian/changlog.kvm

 -- Jan Lübbe <jluebbe@debian.org>  Mon, 02 Nov 2009 11:49:28 +0100
