From: Michael Olbrich <m.olbrich@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Christian Melki <christian.melki@t2data.com>
Subject: Re: [ptxdist] [APPLIED] qemu: Version bump. 11.0.3 -> 11.1.0
Date: Fri, 4 Sep 2026 08:53:04 +0200 [thread overview]
Message-ID: <20260904065304.11096-1-m.olbrich@pengutronix.de> (raw)
In-Reply-To: <20260819185935.3594490-1-christian.melki@t2data.com>
Thanks, applied as 4f1fd705ff8c61ed7b4392f6cd6b697115b20d08.
Michael
[sent from post-receive hook]
On Fri, 04 Sep 2026 08:53:04 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> Not any major overhauls. A bunch of security fixes.
> https://wiki.qemu.org/ChangeLog/11.1
>
> * Forward patchset, applies cleanly.
>
> * Pin down some options that have changed.
>
> Plugs CVEs:
> CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
> CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
> CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
> CVE-2026-9238: Fix DoS via Treaddir.
> CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
> CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
> CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device.
> CVE-2026-6502: use-after-free fix for virtio-gpu.
>
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260819185935.3594490-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
>
> diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
> rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
> similarity index 100%
> rename from patches/qemu-11.0.3/series
> rename to patches/qemu-11.1.0/series
> diff --git a/rules/qemu.make b/rules/qemu.make
> index aee3848dab4d..1d8f240f5ffe 100644
> --- a/rules/qemu.make
> +++ b/rules/qemu.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
> #
> # Paths and names
> #
> -QEMU_VERSION := 11.0.3
> -QEMU_SHA256 := da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
> +QEMU_VERSION := 11.1.0
> +QEMU_SHA256 := 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
> QEMU := qemu-$(QEMU_VERSION)
> QEMU_SUFFIX := tar.xz
> QEMU_URL := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
> @@ -110,10 +110,8 @@ QEMU_CONF_OPT := \
> --disable-gcrypt \
> --disable-gettext \
> --disable-gio \
> - --disable-glusterfs \
> --disable-gnutls \
> --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
> - --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
> --disable-guest-agent \
> --disable-guest-agent-msi \
> --disable-hv-balloon \
> @@ -147,6 +145,7 @@ QEMU_CONF_OPT := \
> --enable-multiprocess \
> --disable-netmap \
> --disable-nettle \
> + --disable-nitro \
> --disable-numa \
> --disable-nvmm \
> --disable-opengl \
> @@ -162,6 +161,7 @@ QEMU_CONF_OPT := \
> --disable-qatzip \
> --disable-qcow1 \
> --disable-qed \
> + --disable-qemu-vnc \
> --disable-qga-vss \
> --disable-qpl \
> --disable-rbd \
prev parent reply other threads:[~2026-09-04 6:53 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-19 18:59 [ptxdist] [PATCH 1/2] " Christian Melki
2026-08-19 18:59 ` [ptxdist] [PATCH 2/2] host-qemu: Follow target qemu " Christian Melki
2026-09-04 6:53 ` [ptxdist] [APPLIED] " Michael Olbrich
2026-09-04 6:53 ` Michael Olbrich [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260904065304.11096-1-m.olbrich@pengutronix.de \
--to=m.olbrich@pengutronix.de \
--cc=christian.melki@t2data.com \
--cc=ptxdist@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox