From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 04 Sep 2026 08:53:34 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x2Nnp-00AdLd-1t for lore@lore.pengutronix.de; Fri, 04 Sep 2026 08:53:34 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x2Nno-0002ZP-8K; Fri, 04 Sep 2026 08:53:32 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1x2NnM-0001XP-JN for ptxdist@pengutronix.de; Fri, 04 Sep 2026 08:53:04 +0200 Received: from drehscheibe.grey.stw.pengutronix.de (drehscheibe.grey.stw.pengutronix.de [IPv6:2a0a:edc0:0:c01:1d::a2]) (Authenticated sender: relay-from-drehscheibe.grey.stw.pengutronix.de) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPSA id 8952E205927; Fri, 04 Sep 2026 08:53:04 +0200 (CEST) Received: from dude05.red.stw.pengutronix.de ([2a0a:edc0:0:1101:1d::54]) by drehscheibe.grey.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1x2NnM-004sGB-1Y; Fri, 04 Sep 2026 08:53:04 +0200 Received: from mol by dude05.red.stw.pengutronix.de with local (Exim 4.98.2) (envelope-from ) id 1x2NnM-000000002t8-1mw3; Fri, 04 Sep 2026 08:53:04 +0200 From: Michael Olbrich To: ptxdist@pengutronix.de Date: Fri, 4 Sep 2026 08:53:04 +0200 Message-ID: <20260904065304.11096-1-m.olbrich@pengutronix.de> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20260819185935.3594490-1-christian.melki@t2data.com> References: <20260819185935.3594490-1-christian.melki@t2data.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [ptxdist] [APPLIED] qemu: Version bump. 11.0.3 -> 11.1.0 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Christian Melki Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Thanks, applied as 4f1fd705ff8c61ed7b4392f6cd6b697115b20d08. Michael [sent from post-receive hook] On Fri, 04 Sep 2026 08:53:04 +0200, Christian Melki wrote: > Not any major overhauls. A bunch of security fixes. > https://wiki.qemu.org/ChangeLog/11.1 > > * Forward patchset, applies cleanly. > > * Pin down some options that have changed. > > Plugs CVEs: > CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports. > CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids. > CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many. > CVE-2026-9238: Fix DoS via Treaddir. > CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device. > CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device. > CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device. > CVE-2026-6502: use-after-free fix for virtio-gpu. > > Signed-off-by: Christian Melki > Message-Id: <20260819185935.3594490-1-christian.melki@t2data.com> > Signed-off-by: Michael Olbrich > > diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch > similarity index 100% > rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch > rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch > diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch > similarity index 100% > rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch > rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch > diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series > similarity index 100% > rename from patches/qemu-11.0.3/series > rename to patches/qemu-11.1.0/series > diff --git a/rules/qemu.make b/rules/qemu.make > index aee3848dab4d..1d8f240f5ffe 100644 > --- a/rules/qemu.make > +++ b/rules/qemu.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu > # > # Paths and names > # > -QEMU_VERSION := 11.0.3 > -QEMU_SHA256 := da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523 > +QEMU_VERSION := 11.1.0 > +QEMU_SHA256 := 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858 > QEMU := qemu-$(QEMU_VERSION) > QEMU_SUFFIX := tar.xz > QEMU_URL := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX) > @@ -110,10 +110,8 @@ QEMU_CONF_OPT := \ > --disable-gcrypt \ > --disable-gettext \ > --disable-gio \ > - --disable-glusterfs \ > --disable-gnutls \ > --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \ > - --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \ > --disable-guest-agent \ > --disable-guest-agent-msi \ > --disable-hv-balloon \ > @@ -147,6 +145,7 @@ QEMU_CONF_OPT := \ > --enable-multiprocess \ > --disable-netmap \ > --disable-nettle \ > + --disable-nitro \ > --disable-numa \ > --disable-nvmm \ > --disable-opengl \ > @@ -162,6 +161,7 @@ QEMU_CONF_OPT := \ > --disable-qatzip \ > --disable-qcow1 \ > --disable-qed \ > + --disable-qemu-vnc \ > --disable-qga-vss \ > --disable-qpl \ > --disable-rbd \