memory leak after fix for CVE-2021-3748

vhost-sock device was not detaching invalid element from the virtqueue on error

ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2021-4206.patch
display-qxl-render-fix-race-condition-in-qxl_cursor-CVE-2021-4207.patch
 two flaws can lead to allocation of small cursor object followed by a
 subsequent heap-based buffer overflow with a potential for executing
 arbitrary code within the context of QEMU process
virtiofsd-drop-membership-of-all-supplementary-group-CVE-2022-0358.patch
 potential group escalation allowed by virtiofsd

This is MR "pu/debian bullseye bug 988174", by Cyril Brulebois.
Discovering work mostly done by Bernhard Übelacker

usb-redir-avoid-dynamic-stack-allocation-CVE-2021-3527.patch
(#988157)

Fix CVE-2021-20257 from upstream: e1000: infinite loop while processing transmit descriptors

Fixes infinite loop in loopback mode of various network devices from upstream:
net-qemu_receive_packet-for-loopback-cadence_gem.patch
net-qemu_receive_packet-for-loopback-dp8393x.patch
net-qemu_receive_packet-for-loopback-e1000.patch
net-qemu_receive_packet-for-loopback-introduce.patch
net-qemu_receive_packet-for-loopback-lan9118.patch
net-qemu_receive_packet-for-loopback-msf2.patch
net-qemu_receive_packet-for-loopback-pcnet.patch
net-qemu_receive_packet-for-loopback-rtl8139.patch
net-qemu_receive_packet-for-loopback-sungem.patch
net-qemu_receive_packet-for-loopback-tx_pkt-iov.patch

This adds two patches from upstream:
virtiofsd-save-error-code-early-at-the-failure-callsite.patch (preparational)
virtiofsd-drop-remapped-security.capability-xattr-as-needed-CVE-2021-20263.patch

This reverts commit e8bb0585.

we removed modules from qemu-system-common for now, so there's no
need for it to depend on any of qemu-system-foo of the same version.
Among other things this fixes #983756 (which should be fixes some
other way anyway, but it should be ok for now).

also closes: #901197

3 virtiofsd patches to fix CVE-2020-35517 (virtiofsd: potential privileged host device access from guest) (#980814)
virtiofsd-extract-lo_do_open-from-lo_open.patch
virtiofsd-optionally-return-inode-pointer-from-lo_do_lookup.patch
virtiofsd-prevent-opening-of-special-files-CVE-2020-35517.patch