Not any major overhauls. A bunch of security fixes. https://wiki.qemu.org/ChangeLog/11.1
* Forward patchset, applies cleanly. * Pin down some options that have changed. Plugs CVEs: CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports. CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids. CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many. CVE-2026-9238: Fix DoS via Treaddir. CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device. CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device. CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus device. CVE-2026-6502: use-after-free fix for virtio-gpu. Signed-off-by: Christian Melki <[email protected]> --- ...-allow-real-symlinks-for-security_model-mapped-f.patch | 0 .../0101-python-don-t-install-local-package-with-e.patch | 0 patches/{qemu-11.0.3 => qemu-11.1.0}/series | 0 rules/qemu.make | 8 ++++---- 4 files changed, 4 insertions(+), 4 deletions(-) rename patches/{qemu-11.0.3 => qemu-11.1.0}/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch (100%) rename patches/{qemu-11.0.3 => qemu-11.1.0}/0101-python-don-t-install-local-package-with-e.patch (100%) rename patches/{qemu-11.0.3 => qemu-11.1.0}/series (100%) diff --git a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch similarity index 100% rename from patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch rename to patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch diff --git a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch similarity index 100% rename from patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch rename to patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series similarity index 100% rename from patches/qemu-11.0.3/series rename to patches/qemu-11.1.0/series diff --git a/rules/qemu.make b/rules/qemu.make index aee3848da..1d8f240f5 100644 --- a/rules/qemu.make +++ b/rules/qemu.make @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu # # Paths and names # -QEMU_VERSION := 11.0.3 -QEMU_SHA256 := da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523 +QEMU_VERSION := 11.1.0 +QEMU_SHA256 := 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858 QEMU := qemu-$(QEMU_VERSION) QEMU_SUFFIX := tar.xz QEMU_URL := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX) @@ -110,10 +110,8 @@ QEMU_CONF_OPT := \ --disable-gcrypt \ --disable-gettext \ --disable-gio \ - --disable-glusterfs \ --disable-gnutls \ --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \ - --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \ --disable-guest-agent \ --disable-guest-agent-msi \ --disable-hv-balloon \ @@ -147,6 +145,7 @@ QEMU_CONF_OPT := \ --enable-multiprocess \ --disable-netmap \ --disable-nettle \ + --disable-nitro \ --disable-numa \ --disable-nvmm \ --disable-opengl \ @@ -162,6 +161,7 @@ QEMU_CONF_OPT := \ --disable-qatzip \ --disable-qcow1 \ --disable-qed \ + --disable-qemu-vnc \ --disable-qga-vss \ --disable-qpl \ --disable-rbd \ -- 2.43.0
