-diff -ur libvirt-11.2.0.orig/src/qemu/qemu_command.c libvirt-11.2.0/src/qemu/qemu_command.c
---- libvirt-11.2.0.orig/src/qemu/qemu_command.c 2025-04-17 13:04:43.582189665 +0200
-+++ libvirt-11.2.0/src/qemu/qemu_command.c 2025-04-17 13:05:03.554238004 +0200
-@@ -8207,6 +8207,10 @@
+diff -ur libvirt-11.6.0.orig/src/qemu/qemu_command.c libvirt-11.6.0/src/qemu/qemu_command.c
+--- libvirt-11.6.0.orig/src/qemu/qemu_command.c 2025-08-13 15:22:04.043953631 +0200
++++ libvirt-11.6.0/src/qemu/qemu_command.c 2025-08-13 15:22:32.652054547 +0200
+@@ -8375,6 +8375,10 @@
virCommandAddEnvPair(cmd, "SASL_CONF_PATH", cfg->vncSASLdir);
/* TODO: Support ACLs later */
}
if (graphics->data.vnc.powerControl != VIR_TRISTATE_BOOL_ABSENT) {
-diff -ur libvirt-11.2.0.orig/src/qemu/qemu_conf.c libvirt-11.2.0/src/qemu/qemu_conf.c
---- libvirt-11.2.0.orig/src/qemu/qemu_conf.c 2025-04-17 13:04:43.582189665 +0200
-+++ libvirt-11.2.0/src/qemu/qemu_conf.c 2025-04-17 13:05:03.554238004 +0200
-@@ -490,6 +490,8 @@
+diff -ur libvirt-11.6.0.orig/src/qemu/qemu_conf.c libvirt-11.6.0/src/qemu/qemu_conf.c
+--- libvirt-11.6.0.orig/src/qemu/qemu_conf.c 2025-08-13 15:22:04.043953631 +0200
++++ libvirt-11.6.0/src/qemu/qemu_conf.c 2025-08-13 15:22:32.652054547 +0200
+@@ -495,6 +495,8 @@
return -1;
if (virConfGetValueBool(conf, "vnc_allow_host_audio", &cfg->vncAllowHostAudio) < 0)
return -1;
if (cfg->vncPassword &&
strlen(cfg->vncPassword) > 8) {
-diff -ur libvirt-11.2.0.orig/src/qemu/qemu_conf.h libvirt-11.2.0/src/qemu/qemu_conf.h
---- libvirt-11.2.0.orig/src/qemu/qemu_conf.h 2025-04-17 13:04:43.582189665 +0200
-+++ libvirt-11.2.0/src/qemu/qemu_conf.h 2025-04-17 13:05:03.554238004 +0200
-@@ -123,6 +123,7 @@
+diff -ur libvirt-11.6.0.orig/src/qemu/qemu_conf.h libvirt-11.6.0/src/qemu/qemu_conf.h
+--- libvirt-11.6.0.orig/src/qemu/qemu_conf.h 2025-08-13 15:22:04.043953631 +0200
++++ libvirt-11.6.0/src/qemu/qemu_conf.h 2025-08-13 15:22:32.652054547 +0200
+@@ -134,6 +134,7 @@
bool vncTLSx509verify;
bool vncTLSx509verifyPresent;
bool vncSASL;
+ bool vncACL;
char *vncTLSx509certdir;
char *vncTLSx509secretUUID;
- char *vncListen;
-diff -ur libvirt-11.2.0.orig/src/qemu/qemu.conf.in libvirt-11.2.0/src/qemu/qemu.conf.in
---- libvirt-11.2.0.orig/src/qemu/qemu.conf.in 2025-04-17 13:04:43.578189656 +0200
-+++ libvirt-11.2.0/src/qemu/qemu.conf.in 2025-04-17 13:05:03.554238004 +0200
-@@ -147,6 +147,15 @@
+ char *vncTLSpriority;
+diff -ur libvirt-11.6.0.orig/src/qemu/qemu.conf.in libvirt-11.6.0/src/qemu/qemu.conf.in
+--- libvirt-11.6.0.orig/src/qemu/qemu.conf.in 2025-08-13 15:22:04.047953646 +0200
++++ libvirt-11.6.0/src/qemu/qemu.conf.in 2025-08-13 15:22:32.652054547 +0200
+@@ -166,6 +166,15 @@
#vnc_sasl = 1
-diff -ur libvirt-11.2.0.orig/docs/auth.rst libvirt-11.2.0/docs/auth.rst
---- libvirt-11.2.0.orig/docs/auth.rst 2025-04-17 13:00:43.793609374 +0200
-+++ libvirt-11.2.0/docs/auth.rst 2025-04-17 13:01:33.233728984 +0200
+diff -ur libvirt-11.6.0.orig/docs/auth.rst libvirt-11.6.0/docs/auth.rst
+--- libvirt-11.6.0.orig/docs/auth.rst 2025-08-13 15:19:50.787483571 +0200
++++ libvirt-11.6.0/docs/auth.rst 2025-08-13 15:20:10.119551759 +0200
@@ -225,7 +225,7 @@
Since the libvirt SASL config file defaults to using ``GSSAPI`` (Kerberos), a
parameter to ``scram-sha-256``.
**Note:** previous versions of libvirt suggested ``DIGEST-MD5`` and
-diff -ur libvirt-11.2.0.orig/src/qemu/qemu.conf.in libvirt-11.2.0/src/qemu/qemu.conf.in
---- libvirt-11.2.0.orig/src/qemu/qemu.conf.in 2025-04-17 13:00:43.849609509 +0200
-+++ libvirt-11.2.0/src/qemu/qemu.conf.in 2025-04-17 13:01:33.233728984 +0200
-@@ -141,18 +141,18 @@
+diff -ur libvirt-11.6.0.orig/src/qemu/qemu.conf.in libvirt-11.6.0/src/qemu/qemu.conf.in
+--- libvirt-11.6.0.orig/src/qemu/qemu.conf.in 2025-08-13 15:19:50.847483782 +0200
++++ libvirt-11.6.0/src/qemu/qemu.conf.in 2025-08-13 15:21:02.439736322 +0200
+@@ -160,18 +160,18 @@
# Examples include vinagre, virt-viewer and virt-manager
# itself. UltraVNC, RealVNC, TightVNC do not support this
#
# QEMU implements an extension for providing audio over a VNC connection,
-@@ -217,17 +217,17 @@
+@@ -236,18 +236,18 @@
# Enable use of SASL encryption on the SPICE server. This requires
# a SPICE client which supports the SASL protocol extension.
#
#
#spice_sasl = 1
+
-# The default SASL configuration file is located in /etc/sasl2/
+# The default SASL configuration file is located in /etc/sasl/
# When running libvirtd unprivileged, it may be desirable to
-#spice_sasl_dir = "/some/directory/sasl2"
+#spice_sasl_dir = "/some/directory/sasl"
+
# RDP is configured to listen on 127.0.0.1 by default.
- # To make it listen on all public interfaces, uncomment
-diff -ur libvirt-11.2.0.orig/src/qemu/test_libvirtd_qemu.aug.in libvirt-11.2.0/src/qemu/test_libvirtd_qemu.aug.in
---- libvirt-11.2.0.orig/src/qemu/test_libvirtd_qemu.aug.in 2025-04-17 13:00:43.853609519 +0200
-+++ libvirt-11.2.0/src/qemu/test_libvirtd_qemu.aug.in 2025-04-17 13:02:36.781882769 +0200
-@@ -13,7 +13,7 @@
- { "vnc_tls_x509_verify" = "1" }
+diff -ur libvirt-11.6.0.orig/src/qemu/test_libvirtd_qemu.aug.in libvirt-11.6.0/src/qemu/test_libvirtd_qemu.aug.in
+--- libvirt-11.6.0.orig/src/qemu/test_libvirtd_qemu.aug.in 2025-08-13 15:19:50.851483797 +0200
++++ libvirt-11.6.0/src/qemu/test_libvirtd_qemu.aug.in 2025-08-13 15:20:10.119551759 +0200
+@@ -15,7 +15,7 @@
+ { "vnc_tls_priority" = "@SYSTEM" }
{ "vnc_password" = "XYZ12345" }
{ "vnc_sasl" = "1" }
-{ "vnc_sasl_dir" = "/some/directory/sasl2" }
{ "vnc_allow_host_audio" = "0" }
{ "spice_listen" = "0.0.0.0" }
{ "spice_tls" = "1" }
-@@ -21,7 +21,7 @@
+@@ -23,7 +23,7 @@
{ "spice_auto_unix_socket" = "1" }
{ "spice_password" = "XYZ12345" }
{ "spice_sasl" = "1" }
{ "rdp_listen" = "0.0.0.0" }
{ "rdp_tls_x509_cert_dir" = "/etc/pki/libvirt-rdp" }
{ "rdp_username" = "user" }
-diff -ur libvirt-11.2.0.orig/src/remote/libvirtd.conf.in libvirt-11.2.0/src/remote/libvirtd.conf.in
---- libvirt-11.2.0.orig/src/remote/libvirtd.conf.in 2025-04-17 13:00:43.853609519 +0200
-+++ libvirt-11.2.0/src/remote/libvirtd.conf.in 2025-04-17 13:01:33.233728984 +0200
+diff -ur libvirt-11.6.0.orig/src/remote/libvirtd.conf.in libvirt-11.6.0/src/remote/libvirtd.conf.in
+--- libvirt-11.6.0.orig/src/remote/libvirtd.conf.in 2025-08-13 15:19:50.851483797 +0200
++++ libvirt-11.6.0/src/remote/libvirtd.conf.in 2025-08-13 15:20:10.119551759 +0200
@@ -140,7 +140,7 @@
# the network providing auth (eg, TLS/x509 certificates)
#
#auth_tcp = "sasl"
# Change the authentication scheme for TLS sockets.
-diff -ur libvirt-11.2.0.orig/src/remote/meson.build libvirt-11.2.0/src/remote/meson.build
---- libvirt-11.2.0.orig/src/remote/meson.build 2025-04-17 13:00:43.853609519 +0200
-+++ libvirt-11.2.0/src/remote/meson.build 2025-04-17 13:01:33.233728984 +0200
+diff -ur libvirt-11.6.0.orig/src/remote/meson.build libvirt-11.6.0/src/remote/meson.build
+--- libvirt-11.6.0.orig/src/remote/meson.build 2025-08-13 15:19:50.851483797 +0200
++++ libvirt-11.6.0/src/remote/meson.build 2025-08-13 15:20:10.119551759 +0200
@@ -338,7 +338,7 @@
if conf.has('WITH_SASL')
install_data(
rename: [ 'libvirt.conf' ],
)
endif
-diff -ur libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args libvirt-11.2.0/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args
---- libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args 2025-04-17 13:00:43.985609838 +0200
-+++ libvirt-11.2.0/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args 2025-04-17 13:01:33.233728984 +0200
+diff -ur libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args libvirt-11.6.0/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args
+--- libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args 2025-08-13 15:19:50.967484206 +0200
++++ libvirt-11.6.0/tests/qemuxmlconfdata/graphics-spice-sasl.x86_64-latest.args 2025-08-13 15:20:10.119551759 +0200
@@ -6,7 +6,7 @@
XDG_DATA_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.local/share \
XDG_CACHE_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.cache \
/usr/bin/qemu-system-x86_64 \
-name guest=QEMUGuest1,debug-threads=on \
-S \
-diff -ur libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args
---- libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args 2025-04-17 13:00:43.989609848 +0200
-+++ libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args 2025-04-17 13:01:33.233728984 +0200
+diff -ur libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args
+--- libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args 2025-08-13 15:19:50.971484219 +0200
++++ libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-sasl.x86_64-latest.args 2025-08-13 15:20:10.119551759 +0200
@@ -6,7 +6,7 @@
XDG_DATA_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.local/share \
XDG_CACHE_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.cache \
/usr/bin/qemu-system-x86_64 \
-name guest=QEMUGuest1,debug-threads=on \
-S \
-diff -ur libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args
---- libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args 2025-04-17 13:00:43.989609848 +0200
-+++ libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args 2025-04-17 13:01:35.525734530 +0200
+diff -ur libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args
+--- libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args 2025-08-13 15:19:50.971484219 +0200
++++ libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-tls-secret.x86_64-latest.args 2025-08-13 15:20:10.119551759 +0200
@@ -6,7 +6,7 @@
XDG_DATA_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.local/share \
XDG_CACHE_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.cache \
/usr/bin/qemu-system-x86_64 \
-name guest=QEMUGuest1,debug-threads=on \
-S \
-diff -ur libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args
---- libvirt-11.2.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args 2025-04-17 13:00:43.989609848 +0200
-+++ libvirt-11.2.0/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args 2025-04-17 13:01:35.525734530 +0200
+diff -ur libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args
+--- libvirt-11.6.0.orig/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args 2025-08-13 15:19:50.971484219 +0200
++++ libvirt-11.6.0/tests/qemuxmlconfdata/graphics-vnc-tls.x86_64-latest.args 2025-08-13 15:20:10.119551759 +0200
@@ -6,7 +6,7 @@
XDG_DATA_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.local/share \
XDG_CACHE_HOME=/var/lib/libvirt/qemu/domain--1-QEMUGuest1/.cache \
/usr/bin/qemu-system-x86_64 \
-name guest=QEMUGuest1,debug-threads=on \
-S \
-diff -ur libvirt-11.2.0.orig/tests/testutilsqemu.c libvirt-11.2.0/tests/testutilsqemu.c
---- libvirt-11.2.0.orig/tests/testutilsqemu.c 2025-04-17 13:00:44.045609984 +0200
-+++ libvirt-11.2.0/tests/testutilsqemu.c 2025-04-17 13:01:35.525734530 +0200
-@@ -402,9 +402,9 @@
+diff -ur libvirt-11.6.0.orig/tests/testutilsqemu.c libvirt-11.6.0/tests/testutilsqemu.c
+--- libvirt-11.6.0.orig/tests/testutilsqemu.c 2025-08-13 15:19:51.019484389 +0200
++++ libvirt-11.6.0/tests/testutilsqemu.c 2025-08-13 15:20:10.119551759 +0200
+@@ -404,9 +404,9 @@
cfg->backupTLSx509certdir = g_strdup("/etc/pki/libvirt-backup");
VIR_FREE(cfg->vncSASLdir);
VIR_FREE(cfg->spicePassword);
cfg->spicePassword = g_strdup("123456");
-diff -ur libvirt-11.2.0.orig/tests/virconfdata/libvirtd.conf libvirt-11.2.0/tests/virconfdata/libvirtd.conf
---- libvirt-11.2.0.orig/tests/virconfdata/libvirtd.conf 2025-04-17 13:00:44.281610554 +0200
-+++ libvirt-11.2.0/tests/virconfdata/libvirtd.conf 2025-04-17 13:01:35.525734530 +0200
+diff -ur libvirt-11.6.0.orig/tests/virconfdata/libvirtd.conf libvirt-11.6.0/tests/virconfdata/libvirtd.conf
+--- libvirt-11.6.0.orig/tests/virconfdata/libvirtd.conf 2025-08-13 15:19:51.219485095 +0200
++++ libvirt-11.6.0/tests/virconfdata/libvirtd.conf 2025-08-13 15:20:10.119551759 +0200
@@ -91,7 +91,7 @@
# the network providing auth (eg, TLS/x509 certificates)
#
auth_tcp = "sasl"
# Change the authentication scheme for TLS sockets.
-diff -ur libvirt-11.2.0.orig/tests/virconfdata/libvirtd.out libvirt-11.2.0/tests/virconfdata/libvirtd.out
---- libvirt-11.2.0.orig/tests/virconfdata/libvirtd.out 2025-04-17 13:00:44.281610554 +0200
-+++ libvirt-11.2.0/tests/virconfdata/libvirtd.out 2025-04-17 13:01:35.525734530 +0200
+diff -ur libvirt-11.6.0.orig/tests/virconfdata/libvirtd.out libvirt-11.6.0/tests/virconfdata/libvirtd.out
+--- libvirt-11.6.0.orig/tests/virconfdata/libvirtd.out 2025-08-13 15:19:51.219485095 +0200
++++ libvirt-11.6.0/tests/virconfdata/libvirtd.out 2025-08-13 15:20:10.119551759 +0200
@@ -73,7 +73,7 @@
# the network providing auth (eg, TLS/x509 certificates)
#