From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 27 Jul 2026 22:04:22 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1woRYj-003YGn-33 for lore@lore.pengutronix.de; Mon, 27 Jul 2026 22:04:22 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1woRYi-00046A-7u; Mon, 27 Jul 2026 22:04:20 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1woRYV-000463-Qo for ptxdist@pengutronix.de; Mon, 27 Jul 2026 22:04:07 +0200 Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::3]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 7E749202054 for ; Mon, 27 Jul 2026 22:04:03 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=WU9Yaxn6; dmarc=pass (policy=none) header.from=t2data.com; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=SvRrYclLtaRGspyKqmKMaCyIgrxEr6ryszAt9ofoN/k5JLHzpBH5pn7+wwJdLq3TjZrBliGdKHMJOBG46i5ONBhj4/q0NjaStLhTLsJfEkSlEO6xctTfauPl+ZUl56Atr/HTE/7W8+JRVJEjnrpLquP42Eh10JP/leINlbNFmSTbMISt7Aq0THkg3LtSnIasQ9Ws2WF9cKAra8ND91kUnaGrw7spUqCPa5XJQrwfQoWKldcJRMHYmVlX30d8P93K70loEKJI6ZsQRhHZFxoCQy+wPeQkOLFHiu8573E/xLIxapdRuZJ43t5MgI1BGzLIMTs3KCRpR9m/jHediS540A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gV7GIsrJP9HgTK80bnGXaqSUvCk72S660ZOpSrGg8pA=; b=AnvmndRrJREf2G2QBSxbOnIFB/tN36uMf8Uz1nggVOPWHe0RoF6c6z1YWqoxZNp9heJMHabTWBAdD6W6+TfVBKtWfPz5VTByLBrg/B4ghIl4aQauox8Z9lNQT9zOQ40vDBbKU5Q17MyQOodf/MrBw9guxetSBwNjOjG39dW44Ir57OdaUARw06t9o53Cj6p5vXbMhslZQBWBfumQjx+aWCL4jbOOB73KgWSRfAmT4uM4Gh8ytM1V8vGNSS2oYJ2wyxajdxwPdmYFx2ku5ieFmA6w/ANzNJJzU7x3n7PO38jYQojjHKsrO9gYSTmDPNFL4+95CMqf6F3FyiYa0MbVww== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gV7GIsrJP9HgTK80bnGXaqSUvCk72S660ZOpSrGg8pA=; b=WU9Yaxn68KLzuzOwRjdXR1W51GYDB6WnS0Cu8NqwTXJw83EtZmmKQ4V8PoPIuTQeH0Ss+n2HK58Mifj+sPGezDWm41GeLoZx7d2yM69rWY9OQJwTzreKITf3BqJ4tgt5bPh8+/7/ePB0nXGhZEKSL4ob0eV5sPukyw9EZSFI7Bs= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by PA1P251MB1065.EURP251.PROD.OUTLOOK.COM (2603:10a6:102:459::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.245.13; Mon, 27 Jul 2026 20:04:00 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0245.012; Mon, 27 Jul 2026 20:04:00 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Mon, 27 Jul 2026 22:03:54 +0200 Message-ID: <20260727200354.2401578-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0076.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:274::13) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|PA1P251MB1065:EE_ X-MS-Office365-Filtering-Correlation-Id: b52bd327-ddfb-4f91-9c64-08deec1a3325 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|23010399003|376014|52116014|366016|10067099003|56012099006|18002099003|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(23010399003)(376014)(52116014)(366016)(10067099003)(56012099006)(18002099003)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?BL5xqQLN4vxuF9n6ErisIoeUtKl8UPIxUwgaFSIWCYt8LRZgXJzj8N7zVrjI?= =?us-ascii?Q?Cfw3iIJDLrRLbbGVymiazQgPTquXpMVDNy1ovG5zFC5iBXlscMVGDkhylgsE?= =?us-ascii?Q?JJWtJrBgkXTW1Q6sh7eEk3Fre4woo01mJdWBbJZkdZP9eNk5+0Ld0CpfJWvv?= =?us-ascii?Q?5xiq+TM+Cjxk6DTYmhZSjGlhCbDJLiqkap+wEDm45hjLJlWIa3q1XeNXSKZP?= =?us-ascii?Q?bfpRQUH3XoW5SebSfkydHLf5BzUoTVJcElI6eZB0vzIfjLum2VwkGzvc4gAF?= =?us-ascii?Q?2RDECOimnNVhGml80fNip0Bqbs/l38OV/Fe2WnsYu9rEkWDQ2PimXZlA4vJR?= =?us-ascii?Q?AilDGl+V1Z4qpp6Ger4hFCpfyxpW1G87mpIPOjjvTEY0qstB9ZEIQai2slpP?= =?us-ascii?Q?GLdeSO1GVDvyIkEOhzFvfzJpt5W1aG0N36+PnLEwE911YH47jCZZ4DsQvFFY?= =?us-ascii?Q?FzkIJEQ3uyPLixI7GQVpzjdEfCF18K2X+0XSheokfuL9J1ATuW5NSkXDKB5M?= =?us-ascii?Q?GQDkPkbavtQfF60G1jlFKfpSHbsqee5HC8u3nBEYZhCeuShNj8XCqvLHW4B+?= =?us-ascii?Q?3vkOpQL5icCVc6OnJTSbhtNBb57cA2UTCEMz73XixorT2OZKejgcCqKGpxw5?= =?us-ascii?Q?+bCsrdUNB0j1sF+XHVveXM4iIQen4w0r82hYAz8Sux9tKDfsOnECWyGdpBO5?= =?us-ascii?Q?xEV3T5vSPUcRZQ2rCn65lhm1QPzO4QkrTC630JAzI+wdqOl3/QEICua53GX/?= =?us-ascii?Q?XNFnXpUD8mrW9g7zLS1Mf9jWC6liXKr3AaAywj72g4kxfsTK4nFdGya8R+BX?= =?us-ascii?Q?QWZRAItOqb/wL8JtaKdwT608L7n2sjEqUVfsvuQN7VOUcYKfvVbci63+hEhp?= =?us-ascii?Q?leesWucK8jn4gWvQJyf66MlPLj0jRRA7EdLLzCImUgVrUyxcYqqPYwYCPUTR?= =?us-ascii?Q?Vlqa+xbJvD5DcQk8P6FUf+jQs7ulD0Ha/QlLA7UiZpxTOkZrUcsANbcoeQgJ?= =?us-ascii?Q?XcluAAp7Ovwzt8ZHcVznk4KJZMPo0xyVReeHeueNuS94D2QRmjlU/jSv5PKC?= =?us-ascii?Q?IiFUX3Xy2eYDL7yQB/4GfviRAjHGPwmBc974qeK+Ci/Y6lN3Bczl91VI1Zm1?= =?us-ascii?Q?BulFPpsHtYqwXmin6XqL0/B363c7jfxMJ3SdhaftrSuU0mMjm7Y+ejNIpd51?= =?us-ascii?Q?bDEkLr8FBwGrSX1arTXJqH5ZPVAH+6Xu1UK2Hn4tySUL3HpEbnvUe07O79wo?= =?us-ascii?Q?EAyfGVrSd+9CDKNoL6zurY7D3iY4T2vI9bo31YNYl9oBrOyuph0VKUrxlI0X?= =?us-ascii?Q?M3552YuNf9OVbxxzWJ8X4vO3vkDbZujkyNynphXLOSsWGTEr/wOZBtwJ4DOC?= =?us-ascii?Q?5KhCJCuYDI/tJB7lbFLUX3gyihsvWHezg8K9Dh+cIR9kKS+b7PdO9Da1PsRH?= =?us-ascii?Q?1XLdcO2lqF2W/yqtX1GGvellUCOKTGU7R+uBGHE5rWZxfp4vHhFH4ilfO2Cx?= =?us-ascii?Q?EN6ZD9YhqyDXoUetONp5v6SM+7i0SrDFAr6iLd12VEPVVA+w5zEIJ+m29DzM?= =?us-ascii?Q?OAd81j1beDkyq6GErJOlmXV84kR5OGER4Rbga3Z3y/mzVYwCXbSu0Z2vVFhn?= =?us-ascii?Q?aAm/mHof2iR+vhqu9WAnxI920VqhNEvbk4AjzjhZXKXW/fayIdoxo6D56m9a?= =?us-ascii?Q?CMYyw3iVEo+EKWOXs0lgyggts5zclnGQoHzpqmzm0x2bkTmSgy20Bunczjhu?= =?us-ascii?Q?SVjP7IdRirEGJ3518WwjkMzCkkalROM=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: b52bd327-ddfb-4f91-9c64-08deec1a3325 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jul 2026 20:04:00.6144 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: U8B8ixl0hiNDrKLouqeezMNOsIaoRbTP/dqjrY+2IDdU0LGRwfNuS1Ic4fJ3aNr4AAF5iRta3+Zfqr3hQMbauZlms0t5IhcHjWaPtdVPofw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA1P251MB1065 X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_HAM(-0.00)[-1.000]; RCVD_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2a01:111:f403:c200::3:from]; TO_DN_NONE(0.00)[]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+] X-Rspamd-Action: no action X-Rspamd-Queue-Id: 7E749202054 X-Rspamd-Server: mx1 X-Stat-Signature: 9rzt337d49adsswjf4c37a6fxqwsungn Subject: [ptxdist] [PATCH] qemu: Version bump. 11.0.1 -> 11.0.3 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Bug and security fixes. https://github.com/qemu/qemu/compare/v11.0.1...v11.0.3 Plugs CVEs: CVE-2026-48004: fix missing rename lock in v9fs_co_readdir_many CVE-2026-48914: add missing VIRTIO_BLK_T_SCSI_CMD size check CVE-2026-9238: cap Treaddir allocation * Forward patchset, adjust for line offset. Signed-off-by: Christian Melki --- ...9pfs-allow-real-symlinks-for-security_model-mapped-f.patch | 4 ++-- .../0101-python-don-t-install-local-package-with-e.patch | 0 patches/{qemu-11.0.1 => qemu-11.0.3}/series | 0 rules/qemu.make | 4 ++-- 4 files changed, 4 insertions(+), 4 deletions(-) rename patches/{qemu-11.0.1 => qemu-11.0.3}/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch (96%) rename patches/{qemu-11.0.1 => qemu-11.0.3}/0101-python-don-t-install-local-package-with-e.patch (100%) rename patches/{qemu-11.0.1 => qemu-11.0.3}/series (100%) diff --git a/patches/qemu-11.0.1/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch similarity index 96% rename from patches/qemu-11.0.1/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch rename to patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch index ac80a6e1f..fe53dcafe 100644 --- a/patches/qemu-11.0.1/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch +++ b/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch @@ -11,7 +11,7 @@ Signed-off-by: Michael Olbrich 1 file changed, 27 insertions(+), 13 deletions(-) diff --git a/hw/9pfs/9p-local.c b/hw/9pfs/9p-local.c -index 24cb1da90ae0..9827cefbe12a 100644 +index ee592b62f81f..b795afaa46d6 100644 --- a/hw/9pfs/9p-local.c +++ b/hw/9pfs/9p-local.c @@ -463,8 +463,7 @@ static ssize_t local_readlink(FsContext *fs_ctx, V9fsPath *fs_path, @@ -50,7 +50,7 @@ index 24cb1da90ae0..9827cefbe12a 100644 close_preserve_errno(dirfd); out: g_free(name); -@@ -907,18 +918,21 @@ static int local_symlink(FsContext *fs_ctx, const char *oldpath, +@@ -910,18 +921,21 @@ static int local_symlink(FsContext *fs_ctx, const char *oldpath, int fd; ssize_t oldpath_size, write_size; diff --git a/patches/qemu-11.0.1/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch similarity index 100% rename from patches/qemu-11.0.1/0101-python-don-t-install-local-package-with-e.patch rename to patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch diff --git a/patches/qemu-11.0.1/series b/patches/qemu-11.0.3/series similarity index 100% rename from patches/qemu-11.0.1/series rename to patches/qemu-11.0.3/series diff --git a/rules/qemu.make b/rules/qemu.make index a6a8e712d..aee3848da 100644 --- a/rules/qemu.make +++ b/rules/qemu.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu # # Paths and names # -QEMU_VERSION := 11.0.1 -QEMU_SHA256 := 0d235f5820278d914a3155ec27af8e4258d697ea892895570807d69c0cb8cd64 +QEMU_VERSION := 11.0.3 +QEMU_SHA256 := da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523 QEMU := qemu-$(QEMU_VERSION) QEMU_SUFFIX := tar.xz QEMU_URL := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX) -- 2.43.0