virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)

qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)

vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)

RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)

qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)

process: wait longer on kill per assigned Hostdev (rhbz#1771204)
process: wait longer 5->30s on hard shutdown (rhbz#1771204)

nwfilter: Remove redundant check if object exists (rhbz#1766475)
RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)

qemu: Forcibly mknod() even if it exists (rhbz#1752978)
qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)

domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1741782)
domain_conf: Relax SCSI addr used check (rhbz#1741782)

conf: utility function to update entry in def->nets array (rhbz#1558934)
spec: Fix permissions of /var/run/libvirt/qemu (rhbz#1738693)
RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1754241)
RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1754241)
RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1754241)
RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1754241)
virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1759904)
test: Introduce virnetdevopenvswitchtest (rhbz#1759904)
vircommand: Separate mass FD closing into a function (rhbz#1759904)
virCommand: use procfs to learn opened FDs (rhbz#1759904)
util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1759904)
util: Avoid possible error in virCommandMassClose (rhbz#1759904)
RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1754241)

conf: make arg to virDomainNetGetActualVirtPortProfile() a const (rhbz#1502754)
qemu: move runtime netdev validation into a separate function (rhbz#1502754)
qemu: call common NetDef validation for hotplug and device update (rhbz#1502754)

qemu: Pass qemuCaps to qemuDomainDefCopy (rhbz#1731783)
qemu: Pass qemuCaps to qemuDomainDefFormatBufInternal (rhbz#1731783)
qemu: Pass qemuCaps to qemuDomainSaveImageOpen (rhbz#1731783)
qemu: Pass qemuCaps to qemuMigrationAnyPrepareDef (rhbz#1731783)
qemu: Pass correct qemuCaps to virDomainDefParseString (rhbz#1731783)
qemu: Pass qemuCaps to qemuMigrationCookieXMLParse (rhbz#1731783)
qemu: Pass correct qemuCaps to virDomainDefCopy (rhbz#1731783)
qemu: Pass correct qemuCaps to virDomainDefPostParse (rhbz#1731783)
qemu: Pass correct qemuCaps to virDomainDefParseNode (rhbz#1731783)
qemu: Pass correct qemuCaps to virDomainDeviceDefPostParse (rhbz#1731783)
qemu: Fix crash on incoming migration (rhbz#1731783)
util: storage: Refactor logic for using virStorageFileGetBackendForSupportCheck (rhbz#1724808)
util: storage: Allow checking whether virStorageFileCreate is supported (rhbz#1724808)
util: Export virStorageFileSupportsBackingChainTraversal (rhbz#1724808)
qemu: Allow skipping some errors in qemuDomainStorageOpenStat (rhbz#1724808)
util: storagefile: Don't report errors from virStorageSourceUpdatePhysicalSize (rhbz#1724808)
qemu: driver: Improve error suppression in qemuDomainStorageUpdatePhysical (rhbz#1724808)
qemu: Allow suppressing errors from qemuStorageLimitsRefresh (rhbz#1724808)
qemu: Don't report some ignored errors in qemuDomainGetStatsOneBlockFallback (rhbz#1724808)

qemu: Prefer nvdimmPath over hugepages for memory-backend-file (rhbz#1724980)
docs: snapshot: Encourage people ot use disk 'target' to refer to disks (rhbz#1584682)
docs: schemas: Add 'seclabel' for external disk snapshot (rhbz#1584682)
tests: domainsnapshotxml2xml: make 'disk-seclabel' test operational (rhbz#1584682)
util: storage: Clean up label use in virStorageFileGetMetadataInternal (rhbz#1731329)
util: storage: Don't leak metadata on repeated calls of virStorageFileGetMetadata (rhbz#1731329)

api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)

qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1718172)
qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1718172)

cpu_conf: Fix XPath for parsing TSC frequency (rhbz#1641702)