mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
From: Michael Olbrich <m.olbrich@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Christian Melki <christian.melki@t2data.com>
Subject: Re: [ptxdist] [APPLIED] qemu: Version bump. 11.0.3 -> 11.1.0
Date: Fri,  4 Sep 2026 08:53:04 +0200	[thread overview]
Message-ID: <20260904065304.11096-1-m.olbrich@pengutronix.de> (raw)
In-Reply-To: <20260819185935.3594490-1-christian.melki@t2data.com>

Thanks, applied as 4f1fd705ff8c61ed7b4392f6cd6b697115b20d08.

Michael

[sent from post-receive hook]

On Fri, 04 Sep 2026 08:53:04 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> Not any major overhauls. A bunch of security fixes.
> https://wiki.qemu.org/ChangeLog/11.1
> 
> * Forward patchset, applies cleanly.
> 
> * Pin down some options that have changed.
> 
> Plugs CVEs:
> CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
> CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
> CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
> CVE-2026-9238: Fix DoS via Treaddir.
> CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
> CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
> CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device.
> CVE-2026-6502: use-after-free fix for virtio-gpu.
> 
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260819185935.3594490-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
> rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
> similarity index 100%
> rename from patches/qemu-11.0.3/series
> rename to patches/qemu-11.1.0/series
> diff --git a/rules/qemu.make b/rules/qemu.make
> index aee3848dab4d..1d8f240f5ffe 100644
> --- a/rules/qemu.make
> +++ b/rules/qemu.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
>  #
>  # Paths and names
>  #
> -QEMU_VERSION	:= 11.0.3
> -QEMU_SHA256	:= da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
> +QEMU_VERSION	:= 11.1.0
> +QEMU_SHA256	:= 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
>  QEMU		:= qemu-$(QEMU_VERSION)
>  QEMU_SUFFIX	:= tar.xz
>  QEMU_URL	:= https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
> @@ -110,10 +110,8 @@ QEMU_CONF_OPT	:= \
>  	--disable-gcrypt \
>  	--disable-gettext \
>  	--disable-gio \
> -	--disable-glusterfs \
>  	--disable-gnutls \
>  	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
> -	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
>  	--disable-guest-agent \
>  	--disable-guest-agent-msi \
>  	--disable-hv-balloon \
> @@ -147,6 +145,7 @@ QEMU_CONF_OPT	:= \
>  	--enable-multiprocess \
>  	--disable-netmap \
>  	--disable-nettle \
> +	--disable-nitro \
>  	--disable-numa \
>  	--disable-nvmm \
>  	--disable-opengl \
> @@ -162,6 +161,7 @@ QEMU_CONF_OPT	:= \
>  	--disable-qatzip \
>  	--disable-qcow1 \
>  	--disable-qed \
> +	--disable-qemu-vnc \
>  	--disable-qga-vss \
>  	--disable-qpl \
>  	--disable-rbd \



      parent reply	other threads:[~2026-09-04  6:53 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-19 18:59 [ptxdist] [PATCH 1/2] " Christian Melki
2026-08-19 18:59 ` [ptxdist] [PATCH 2/2] host-qemu: Follow target qemu " Christian Melki
2026-09-04  6:53   ` [ptxdist] [APPLIED] " Michael Olbrich
2026-09-04  6:53 ` Michael Olbrich [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260904065304.11096-1-m.olbrich@pengutronix.de \
    --to=m.olbrich@pengutronix.de \
    --cc=christian.melki@t2data.com \
    --cc=ptxdist@pengutronix.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox