[ptxdist] [PATCH 1/2] qemu: Version bump. 11.0.3 -> 11.1.0

[ptxdist] [PATCH 1/2] qemu: Version bump. 11.0.3 -> 11.1.0

[Christian Melki]

Not any major overhauls. A bunch of security fixes.
https://wiki.qemu.org/ChangeLog/11.1

* Forward patchset, applies cleanly.

* Pin down some options that have changed.

Plugs CVEs:
CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
CVE-2026-9238: Fix DoS via Treaddir.
CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device.
CVE-2026-6502: use-after-free fix for virtio-gpu.

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 ...-allow-real-symlinks-for-security_model-mapped-f.patch | 0
 .../0101-python-don-t-install-local-package-with-e.patch  | 0
 patches/{qemu-11.0.3 => qemu-11.1.0}/series               | 0
 rules/qemu.make                                           | 8 ++++----
 4 files changed, 4 insertions(+), 4 deletions(-)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch (100%)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/0101-python-don-t-install-local-package-with-e.patch (100%)
 rename patches/{qemu-11.0.3 => qemu-11.1.0}/series (100%)

diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
similarity index 100%
rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
similarity index 100%
rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
similarity index 100%
rename from patches/qemu-11.0.3/series
rename to patches/qemu-11.1.0/series
diff --git a/rules/qemu.make b/rules/qemu.make
index aee3848da..1d8f240f5 100644
--- a/rules/qemu.make
+++ b/rules/qemu.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
 #
 # Paths and names
 #
-QEMU_VERSION	:= 11.0.3
-QEMU_SHA256	:= da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
+QEMU_VERSION	:= 11.1.0
+QEMU_SHA256	:= 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
 QEMU		:= qemu-$(QEMU_VERSION)
 QEMU_SUFFIX	:= tar.xz
 QEMU_URL	:= https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
@@ -110,10 +110,8 @@ QEMU_CONF_OPT	:= \
 	--disable-gcrypt \
 	--disable-gettext \
 	--disable-gio \
-	--disable-glusterfs \
 	--disable-gnutls \
 	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
-	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
 	--disable-guest-agent \
 	--disable-guest-agent-msi \
 	--disable-hv-balloon \
@@ -147,6 +145,7 @@ QEMU_CONF_OPT	:= \
 	--enable-multiprocess \
 	--disable-netmap \
 	--disable-nettle \
+	--disable-nitro \
 	--disable-numa \
 	--disable-nvmm \
 	--disable-opengl \
@@ -162,6 +161,7 @@ QEMU_CONF_OPT	:= \
 	--disable-qatzip \
 	--disable-qcow1 \
 	--disable-qed \
+	--disable-qemu-vnc \
 	--disable-qga-vss \
 	--disable-qpl \
 	--disable-rbd \
-- 
2.43.0

[ptxdist] [PATCH 2/2] host-qemu: Follow target qemu bump. 11.0.3 -> 11.1.0

[Christian Melki]

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 rules/host-qemu.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/host-qemu.make b/rules/host-qemu.make
index f7a9cd749..eef2dc133 100644
--- a/rules/host-qemu.make
+++ b/rules/host-qemu.make
@@ -106,10 +106,8 @@ HOST_QEMU_CONF_OPT	:= \
 	--disable-gcrypt \
 	--disable-gettext \
 	--disable-gio \
-	--disable-glusterfs \
 	--disable-gnutls \
 	--disable-gtk \
-	--disable-gtk-clipboard \
 	--disable-guest-agent \
 	--disable-guest-agent-msi \
 	--disable-hv-balloon \
@@ -142,6 +140,7 @@ HOST_QEMU_CONF_OPT	:= \
 	--enable-multiprocess \
 	--disable-netmap \
 	--disable-nettle \
+	--disable-nitro \
 	--disable-numa \
 	--disable-nvmm \
 	--disable-opengl \
@@ -155,6 +154,7 @@ HOST_QEMU_CONF_OPT	:= \
 	--disable-qcow1 \
 	--disable-qatzip \
 	--disable-qed \
+	--disable-qemu-vnc \
 	--disable-qga-vss \
 	--disable-qpl \
 	--disable-rbd \
-- 
2.43.0

Re: [ptxdist] [APPLIED] qemu: Version bump. 11.0.3 -> 11.1.0

[Michael Olbrich]

Thanks, applied as 4f1fd705ff8c61ed7b4392f6cd6b697115b20d08.

Michael

[sent from post-receive hook]

On Fri, 04 Sep 2026 08:53:04 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> Not any major overhauls. A bunch of security fixes.
> https://wiki.qemu.org/ChangeLog/11.1
> 
> * Forward patchset, applies cleanly.
> 
> * Pin down some options that have changed.
> 
> Plugs CVEs:
> CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
> CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
> CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
> CVE-2026-9238: Fix DoS via Treaddir.
> CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
> CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
> CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device.
> CVE-2026-6502: use-after-free fix for virtio-gpu.
> 
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260819185935.3594490-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> similarity index 100%
> rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
> rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
> similarity index 100%
> rename from patches/qemu-11.0.3/series
> rename to patches/qemu-11.1.0/series
> diff --git a/rules/qemu.make b/rules/qemu.make
> index aee3848dab4d..1d8f240f5ffe 100644
> --- a/rules/qemu.make
> +++ b/rules/qemu.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
>  #
>  # Paths and names
>  #
> -QEMU_VERSION	:= 11.0.3
> -QEMU_SHA256	:= da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
> +QEMU_VERSION	:= 11.1.0
> +QEMU_SHA256	:= 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
>  QEMU		:= qemu-$(QEMU_VERSION)
>  QEMU_SUFFIX	:= tar.xz
>  QEMU_URL	:= https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
> @@ -110,10 +110,8 @@ QEMU_CONF_OPT	:= \
>  	--disable-gcrypt \
>  	--disable-gettext \
>  	--disable-gio \
> -	--disable-glusterfs \
>  	--disable-gnutls \
>  	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
> -	--$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
>  	--disable-guest-agent \
>  	--disable-guest-agent-msi \
>  	--disable-hv-balloon \
> @@ -147,6 +145,7 @@ QEMU_CONF_OPT	:= \
>  	--enable-multiprocess \
>  	--disable-netmap \
>  	--disable-nettle \
> +	--disable-nitro \
>  	--disable-numa \
>  	--disable-nvmm \
>  	--disable-opengl \
> @@ -162,6 +161,7 @@ QEMU_CONF_OPT	:= \
>  	--disable-qatzip \
>  	--disable-qcow1 \
>  	--disable-qed \
> +	--disable-qemu-vnc \
>  	--disable-qga-vss \
>  	--disable-qpl \
>  	--disable-rbd \

Re: [ptxdist] [APPLIED] host-qemu: Follow target qemu bump. 11.0.3 -> 11.1.0

[Michael Olbrich]

Thanks, applied as 56c606dd861233de3422ef60faa35ab12a251769.

Michael

[sent from post-receive hook]

On Fri, 04 Sep 2026 08:53:05 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260819185935.3594490-2-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/host-qemu.make b/rules/host-qemu.make
> index f7a9cd7492c8..eef2dc133e63 100644
> --- a/rules/host-qemu.make
> +++ b/rules/host-qemu.make
> @@ -106,10 +106,8 @@ HOST_QEMU_CONF_OPT	:= \
>  	--disable-gcrypt \
>  	--disable-gettext \
>  	--disable-gio \
> -	--disable-glusterfs \
>  	--disable-gnutls \
>  	--disable-gtk \
> -	--disable-gtk-clipboard \
>  	--disable-guest-agent \
>  	--disable-guest-agent-msi \
>  	--disable-hv-balloon \
> @@ -142,6 +140,7 @@ HOST_QEMU_CONF_OPT	:= \
>  	--enable-multiprocess \
>  	--disable-netmap \
>  	--disable-nettle \
> +	--disable-nitro \
>  	--disable-numa \
>  	--disable-nvmm \
>  	--disable-opengl \
> @@ -155,6 +154,7 @@ HOST_QEMU_CONF_OPT	:= \
>  	--disable-qcow1 \
>  	--disable-qatzip \
>  	--disable-qed \
> +	--disable-qemu-vnc \
>  	--disable-qga-vss \
>  	--disable-qpl \
>  	--disable-rbd \