From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 19 Aug 2026 21:00:02 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wwlW5-004xOi-2b for lore@lore.pengutronix.de; Wed, 19 Aug 2026 21:00:02 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wwlW3-0004DR-93; Wed, 19 Aug 2026 20:59:59 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1wwlVt-0004DB-8F for ptxdist@pengutronix.de; Wed, 19 Aug 2026 20:59:49 +0200 Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c207::3]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id D67E020044D for ; Wed, 19 Aug 2026 20:59:44 +0200 (CEST) Authentication-Results: mx1.white.stw.pengutronix.de; dkim=pass header.d=t2datacom.onmicrosoft.com header.s=selector1-t2datacom-onmicrosoft-com header.b=WqsDMWle; dmarc=pass (policy=none) header.from=t2data.com; spf=pass (mx1.white.stw.pengutronix.de: domain of christian.melki@t2data.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=christian.melki@t2data.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=T+gD23peXkOfMfNJd1AfyZ439Sy0hsUA9EUZTZj4QcV9N5mCKR0XW3+lWHz8A4oPv+Czx4NCOC51EvEjkrC5SHTHpjXgpLpRbuOWrcyqi4IqUhS7Vpgs5HUdkMeCiLILN1ZzW5u0g4vWs2m94RXyQ8W69EFqz0mnDxe5H/ifaLZ99inK/0BjLsAieh5xxvJFcn1Mv1gB6ocV6fahxb+TZWVvJC8GtIu/aERPD7k+DzN0J4IrTRV2sCi3ikV1xEwzyqly9YGdwb4U6UzcA4jkDsP+Df352R9NHoFIGyLlhZxTY1zW8uUZY/AquT9KZ9+Zit71DFmjgao2Xyc2gY7RNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=3Q+0xcPrSFaHoj0GxugSuhCiKe5zUqkH1I+AmXiUFNE=; b=zB+TL/eY7oYBITJPfzUTV5DZ/75avIOvegriknsr0VX/V2icSrLRZo9rSQsER7BzhBCjIxC1FE18dQPuXsFWuQwjGsny+mV/d+FdKOJpPRg7Ri8olTiLUxlNXgpPdZAWX/hwKx6US6e85L12DmbpTS3SLK5SJtaJRsZWSvaBApV+VNGCKoFR+e/78in645RtZpCun4ffvWqdLhHKIL/s4OjYHJ5YV81V/85g9mjUPW1CWHyafTTXwBuoQ5dUf2rAt+S8j1FzoZNq2FnuZhnWkOYiNK4LV4+zIucqj+BcFRz7zCrPTjhG/OIdug4dE6fqHqnxDXB5gni+KE9PS2k9gg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3Q+0xcPrSFaHoj0GxugSuhCiKe5zUqkH1I+AmXiUFNE=; b=WqsDMWlec2+BbNChG3NgE+ZHu6oTdj5wZTosWh1VCqNTFdarVHLr1ZAceNi2QN+vZAoPEFDR5ddFAY99fyKWvytJFvR0We1VdV9droJeSh/ntKaKZzak5X8BBl3mz2aYvpfEG8ERxHaiNIU6QCy/WuHFDlXfK/xA7qCvGFqsxJQ= Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by GV2P251MB0897.EURP251.PROD.OUTLOOK.COM (2603:10a6:150:ab::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.8; Wed, 19 Aug 2026 18:59:41 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%3]) with mapi id 15.21.0339.007; Wed, 19 Aug 2026 18:59:41 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 19 Aug 2026 20:59:34 +0200 Message-ID: <20260819185935.3594490-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVZP280CA0036.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:26f::13) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|GV2P251MB0897:EE_ X-MS-Office365-Filtering-Correlation-Id: 5209304e-b2b1-48e4-4710-08defe24063c X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|52116014|376014|1800799024|366016|23010399003|10067099003|56012099006|18002099003|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(52116014)(376014)(1800799024)(366016)(23010399003)(10067099003)(56012099006)(18002099003)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?4UrX3UmQNZJVgO6ayRcIUWSL+D6K5Dpc2RC/R3fzK22Bc5+NFeodcQxGOw4V?= =?us-ascii?Q?lePbubxxWZLdzIjKZQCLrkWiIdgtZQd+t3ZO/jU1ROywlHv/mTZ3MZNcRhGq?= =?us-ascii?Q?81nj1Ey/hGRIzYMgxYSjM1OKJXRJtWEovoa2kG6LFh6dQ2zx/r40XVsMYSMl?= =?us-ascii?Q?6dy1cs22vjXJpB8Zfd9Dl1kXf7LunP8FtYotbEWPWYivp4FmVG1WbuXFsJMq?= =?us-ascii?Q?966//b7vLAdJsNbOVyyiq02bXeFoxDS3D00wyyXvO7wc0NivMmkN0LNQwK9+?= =?us-ascii?Q?U9GsXZBmyhgHhSUXGhngreYJqPuM2U55jprVefsWkUJvdlwDkrFLARn5lMCX?= =?us-ascii?Q?j2au3SMUjqE6vAf9f+HfRL7wS3YTUKo8iph/77TcfsZ8vhbb+v9dJlzLDq9d?= =?us-ascii?Q?GYz4Iznt2BzRWN9oq2wMf5Cm7yNRLISb+og8nX/C1bSF2CaMVJ1B0jrCmUrg?= =?us-ascii?Q?2cuwl12r/3OI8BdZHBHws3cMU3DX1b4KjRpPydN4wPwFFtEU78OUtDydJCVG?= =?us-ascii?Q?FIewl/CmjkE0kBrfO0Gzed/5HCAmpYzv8oFI2dXobR4MCuScZU/v2krUmqFt?= =?us-ascii?Q?a9UJUn7ovnEXaw8ZbpdRWH0g0gOENp29HLFUNW0qxy2m5GzbvSMxztFe5uH5?= =?us-ascii?Q?qz6kvLYVpRIztQYtheXSQz6HxpWTlDI3qu8hM+v83yiEhWZc8pVCAs8fx19q?= =?us-ascii?Q?0OZadiOy4IorTxvf/ozJHkGbCv/v0jmrpzH/JHLFuCKFmJWM7sXgY4Wvz5/R?= =?us-ascii?Q?p0wvrJ2Brtqx3GnLn1RxupIcQs0roVcz2stgAj3jrn+3auBFCRlTGzwWzEi+?= =?us-ascii?Q?pEijbaQdrNta8ppUVvYhf7x1lmO9NaM30CuhKRHa4U3TIx7D6In4O/o7oJrb?= =?us-ascii?Q?ZXZVjTwdUcjY8vzEivLURmrOmkXV0hMJVcDPGPh0G6p7do3qhyqARLe4hUz8?= =?us-ascii?Q?DLiRQRu55C0Bj7bjsEKPVdJpJTtrKcFSR6NBDrLb1KJXGHBPn+xTARkoOVc+?= =?us-ascii?Q?xtVILi4fqbKB/cNj6KcpJ5pSRTI0I9ZbliuQj2x9GxlbQ8+14v4lsWp3sdzV?= =?us-ascii?Q?mnfPOYKEw8sVSIwpgoDA/jnS17MR477q/LVSMiqha5SDXlEn/nZosi4H65HG?= =?us-ascii?Q?MQiS+8Ep4QP0qF7eqbiaUNjl5fHOQMNkGoWtWSCmWh6W42W5O8y8bYhlVNdk?= =?us-ascii?Q?llHFObpI/VPt7/Dh9W+8XDXW6J16AY3r8n4Rkcisiq2diLjLlM1hSd0r+4re?= =?us-ascii?Q?Lxej1ZUqj+I3a53Q3L93aqpBJuVHjGozJv9Q7ohanmSUT7uyPgTVWziOEo6Y?= =?us-ascii?Q?sCoDDTOxYDbDHtRpOULbF3WYxmaqdOyswHXc1s8xkfsOIAXJecCocEysxVzL?= =?us-ascii?Q?9uszYNlTV9hnMg4SqUIx3g+r6jvgjSy6BASFJrIwQwei3IMJT2N7X1QUasD+?= =?us-ascii?Q?d6z+Bc9K9ew0T4zTC/A8IMS9vwW0vw9Lt2DdTuInxA5LzdwaRkObj9TmeI1m?= =?us-ascii?Q?Q9zIdQdzDbEobkWYVJhOOwnoXdUzLfJPF5+c0uzWf142z6o+4VY7fO/eNlb5?= =?us-ascii?Q?1hh1JKHidf5l2uOj0pLlkihYLikljpmXDgh0+KvR1svb6Dvz3SkL/iNrf2Jk?= =?us-ascii?Q?jAkKBzl9nOivRh5SmG1ipoWmOAVqohb/uTh5JlGaWi9sxXFRg+KV4vqUG0Ez?= =?us-ascii?Q?IJMNjQCX00CB5ZY7JdDja1oREkSfvG9RuPOdohL6CTZjLoqmwrlLLJ6yjSHa?= =?us-ascii?Q?8Qtb/p9H03/sQHUYzIfFoVfy0UBbwoA=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5209304e-b2b1-48e4-4710-08defe24063c X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Aug 2026 18:59:41.1537 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: w3yuiXCFS6D1hw2Bb7CKDoPfHg+moAOPB5HXQPpdAtn7OQS0WULQDNJYeGT0HbBE2gDVX+emng6WrMDcqo2MnKD6HvKeAhLcHYG/roBFV8U= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2P251MB0897 X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: q8a8gd5kdqy7iuotq3twuyc17jy9m9gx X-Spamd-Result: default: False [-3.50 / 15.00]; BAYES_HAM(-3.00)[99.99%]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[t2data.com,none]; R_DKIM_ALLOW(-0.20)[t2datacom.onmicrosoft.com:s=selector1-t2datacom-onmicrosoft-com]; R_SPF_ALLOW(-0.20)[+ip6:2a01:111:f403:c000::/51]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[t2datacom.onmicrosoft.com:+]; ASN(0.00)[asn:8075, ipnet:2a01:111:f000::/36, country:US]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; NEURAL_HAM(-0.00)[-1.000]; TO_DN_NONE(0.00)[]; FROM_HAS_DN(0.00)[] X-Rspamd-Queue-Id: D67E020044D X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,FORGED_SPF_HELO,SPF_HELO_PASS autolearn=no autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 1/2] qemu: Version bump. 11.0.3 -> 11.1.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Not any major overhauls. A bunch of security fixes. https://wiki.qemu.org/ChangeLog/11.1 * Forward patchset, applies cleanly. * Pin down some options that have changed. Plugs CVEs: CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports. CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids. CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many. CVE-2026-9238: Fix DoS via Treaddir. CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device. CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device. CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device. CVE-2026-6502: use-after-free fix for virtio-gpu. Signed-off-by: Christian Melki --- ...-allow-real-symlinks-for-security_model-mapped-f.patch | 0 .../0101-python-don-t-install-local-package-with-e.patch | 0 patches/{qemu-11.0.3 => qemu-11.1.0}/series | 0 rules/qemu.make | 8 ++++---- 4 files changed, 4 insertions(+), 4 deletions(-) rename patches/{qemu-11.0.3 => qemu-11.1.0}/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch (100%) rename patches/{qemu-11.0.3 => qemu-11.1.0}/0101-python-don-t-install-local-package-with-e.patch (100%) rename patches/{qemu-11.0.3 => qemu-11.1.0}/series (100%) diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch similarity index 100% rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch similarity index 100% rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series similarity index 100% rename from patches/qemu-11.0.3/series rename to patches/qemu-11.1.0/series diff --git a/rules/qemu.make b/rules/qemu.make index aee3848da..1d8f240f5 100644 --- a/rules/qemu.make +++ b/rules/qemu.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu # # Paths and names # -QEMU_VERSION := 11.0.3 -QEMU_SHA256 := da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523 +QEMU_VERSION := 11.1.0 +QEMU_SHA256 := 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858 QEMU := qemu-$(QEMU_VERSION) QEMU_SUFFIX := tar.xz QEMU_URL := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX) @@ -110,10 +110,8 @@ QEMU_CONF_OPT := \ --disable-gcrypt \ --disable-gettext \ --disable-gio \ - --disable-glusterfs \ --disable-gnutls \ --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \ - --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \ --disable-guest-agent \ --disable-guest-agent-msi \ --disable-hv-balloon \ @@ -147,6 +145,7 @@ QEMU_CONF_OPT := \ --enable-multiprocess \ --disable-netmap \ --disable-nettle \ + --disable-nitro \ --disable-numa \ --disable-nvmm \ --disable-opengl \ @@ -162,6 +161,7 @@ QEMU_CONF_OPT := \ --disable-qatzip \ --disable-qcow1 \ --disable-qed \ + --disable-qemu-vnc \ --disable-qga-vss \ --disable-qpl \ --disable-rbd \ -- 2.43.0