- KVM: x86: Check non canonical addresses upon WRMSR
- Resolves: bz#1152982
 (CVE-2014-3610 kernel: kvm: noncanonical MSR writes [rhel-5.11.z])

- KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032217]
- Resolves: bz#1032217
 (CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.11])

- KVM: x86: prevent cross page vapic_addr access (CVE-2013-6368) [bz#1032219]
- KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) [bz#1032216]
- Resolves: bz#1032219
  (CVE-2013-6368 kvm: cross page vapic_addr access [rhel-5.10])
- Resolves: bz#1032216
  CVE-2013-6367 kvm: division by zero in apic_get_tmcct() [rhel-5.10.z]

- kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
- Resolves: bz#947363
  (RHEL.5.8.32 guest hang when installing)

- kvm-e1000-Discard-packets-that-are-too-long-if-SBP-and-L.patch [bz#910839]
- kvm-e1000-Discard-oversized-packets-based-on-SBP-LPE.patch [bz#910839]
- Resolves: bz#910839
  (CVE-2012-6075  qemu (e1000 device driver): Buffer overflow when processing large packets when SBP and LPE flags are disabled [rhel-5.9.z])

- kvm-virtio-Factor-virtqueue_map_sg-out.patch [bz#684745]
- kvm-virtio-blk-fix-the-list-operation-in-virtio_blk_load.patch [bz#684745]
- kvm-virtio-blk-Fix-migration-of-queued-requests.patch [bz#684745]
- kvm-block-prevent-snapshot-mode-TMPDIR-symlink-attack.patch [bz#825687]
- Resolves: bz#684745
  (Guest I/O can't be resumed after I/O failure on one host and then migration to another host)
- Resolves: bz#825687
  (CVE-2012-2652 qemu: vulnerable to temporary file symlink attacks [rhel-5.9])

- Add missing kvm-fix-l1_map-buffer-overflow.patch [bz#958359]
- Resolves: bz#958359
  (qemu-kvm segfault in tb_invalidate_phys_page_range())

- kvm-kernel-kvm-accept-unaligned-MSR_KVM_SYSTEM_TIME-writes.patch [bz#947363]
- Resolves: bz#947363
  (RHEL.5.8.32 guest hang when installing)

- kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch [bz#851255]
- CVE: CVE-2012-3515
- Resolves: bz#851255
  (EMBARGOED CVE-2012-3515 qemu/kvm: VT100 emulation vulnerability [rhel-5.8.z])

- kvm-kernel-KVM-unmap-pages-from-the-iommu-when-slots-are-remove.patch [bz#814151]
- CVE: CVE-2012-2121
- Resolves: bz#814151
  (CVE-2012-2121 kvm: device assignment page leak [rhel-5.8])

- kvm-posix-aio-compat-fix-thread-accounting-leak.patch [bz#802429]
- Resolves: bz#802429
  ([RHEL5.8 Snapshot2]RHEL5.8 KVMGuest hung during Guest OS booting up)

- kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770101]
- CVE: CVE-2011-4622
- Resolves: bz#770101
  (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.8])

- changed kversion to match latest available RH kernel.
- disabled Werror flag for build

- kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772079]
- Resolves: bz#772079
  (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode packets heap overflow [rhel-5.7.z])
- kvm-Fix-external-module-compat.c-not-to-use-unsupported-.patch [bz#753860]
  (build fix)
- kvm-kernel-KVM-x86-Prevent-starting-PIT-timers-in-the-absence-o.patch [bz#770100]
- Resolves: bz#770100
  (CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system [rhel-5.7.z])

- Disable --enable-werror

- kvm-kernel-KVM-x86-zero-kvm_vcpu_events-interrupt.pad.patch [bz#665407]
- Resolves: bz#665407
  (kvm_vcpu_events.interrupt.pad must be zeroed)
- CVE: CVE-2010-4525