mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Christian Melki <christian.melki@t2data.com>
To: ptxdist@pengutronix.de
Subject: [ptxdist] [PATCH 1/2] qemu: Version bump. 11.0.3 -> 11.1.0
Date: Wed, 19 Aug 2026 20:59:34 +0200	[thread overview]
Message-ID: <20260819185935.3594490-1-christian.melki@t2data.com> (raw)

Not any major overhauls. A bunch of security fixes.
https://wiki.qemu.org/ChangeLog/11.1

* Forward patchset, applies cleanly.

* Pin down some options that have changed.

Plugs CVEs:
CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
CVE-2026-9238: Fix DoS via Treaddir.
CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device.
CVE-2026-6502: use-after-free fix for virtio-gpu.

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 ...-allow-real-symlinks-for-security_model-mapped-f.patch | 0
 .../0101-python-don-t-install-local-package-with-e.patch  | 0
 patches/{qemu-11.0.3 => qemu-11.1.0}/series               | 0
 rules/qemu.make                                           | 8 ++++----
 4 files changed, 4 insertions(+), 4 deletions(-)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch (100%)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/0101-python-don-t-install-local-package-with-e.patch (100%)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/series (100%)

diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
similarity index 100%
rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
similarity index 100%
rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
similarity index 100%
rename from patches/qemu-11.0.3/series
rename to patches/qemu-11.1.0/series
diff --git a/rules/qemu.make b/rules/qemu.make
index aee3848da..1d8f240f5 100644
--- a/rules/qemu.make
+++ b/rules/qemu.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
 #
 # Paths and names
 #
-QEMU_VERSION	:= 11.0.3
-QEMU_SHA256	:= da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
+QEMU_VERSION	:= 11.1.0
+QEMU_SHA256	:= 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
 QEMU		:= qemu-$(QEMU_VERSION)
 QEMU_SUFFIX	:= tar.xz
 QEMU_URL	:= https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
@@ -110,10 +110,8 @@ QEMU_CONF_OPT	:= \
 	--disable-gcrypt \
 	--disable-gettext \
 	--disable-gio \
-	--disable-glusterfs \
 	--disable-gnutls \
 	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
-	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
 	--disable-guest-agent \
 	--disable-guest-agent-msi \
 	--disable-hv-balloon \
@@ -147,6 +145,7 @@ QEMU_CONF_OPT	:= \
 	--enable-multiprocess \
 	--disable-netmap \
 	--disable-nettle \
+	--disable-nitro \
 	--disable-numa \
 	--disable-nvmm \
 	--disable-opengl \
@@ -162,6 +161,7 @@ QEMU_CONF_OPT	:= \
 	--disable-qatzip \
 	--disable-qcow1 \
 	--disable-qed \
+	--disable-qemu-vnc \
 	--disable-qga-vss \
 	--disable-qpl \
 	--disable-rbd \
-- 
2.43.0




             reply	other threads:[~2026-08-19 19:00 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-19 18:59 Christian Melki [this message]
2026-08-19 18:59 ` [ptxdist] [PATCH 2/2] host-qemu: Follow target qemu " Christian Melki

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260819185935.3594490-1-christian.melki@t2data.com \
    --to=christian.melki@t2data.com \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox