Thanks, applied as 4f1fd705ff8c61ed7b4392f6cd6b697115b20d08.

Michael

[sent from post-receive hook]

On Fri, 04 Sep 2026 08:53:04 +0200, Christian Melki 
<[email protected]> wrote:
> Not any major overhauls. A bunch of security fixes.
> https://wiki.qemu.org/ChangeLog/11.1
> 
> * Forward patchset, applies cleanly.
> 
> * Pin down some options that have changed.
> 
> Plugs CVEs:
> CVE-2026-63318: Fix read-only bypass via O_TRUNC on read-only exports.
> CVE-2026-8348: Fix potential host memory exhaustion when using xattr fids.
> CVE-2026-48004: Fix missing rename lock in v9fs_co_readdir_many.
> CVE-2026-9238: Fix DoS via Treaddir.
> CVE-2026-1570: Fix possible use-after-free problem in "usb-redir" device.
> CVE-2026-63319: Fixed possible infinite loop or crash in "usb-redir" device.
> CVE-2026-16043: Fixed possible out-of-bounds heap access in XHCI sysbus 
> device.
> CVE-2026-6502: use-after-free fix for virtio-gpu.
> 
> Signed-off-by: Christian Melki <[email protected]>
> Message-Id: <[email protected]>
> Signed-off-by: Michael Olbrich <[email protected]>
> 
> diff --git 
> a/patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
>  
> b/patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> similarity index 100%
> rename from 
> patches/qemu-11.0.3/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> rename to 
> patches/qemu-11.1.0/0100-9pfs-allow-real-symlinks-for-security_model-mapped-f.patch
> diff --git 
> a/patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch 
> b/patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> similarity index 100%
> rename from 
> patches/qemu-11.0.3/0101-python-don-t-install-local-package-with-e.patch
> rename to 
> patches/qemu-11.1.0/0101-python-don-t-install-local-package-with-e.patch
> diff --git a/patches/qemu-11.0.3/series b/patches/qemu-11.1.0/series
> similarity index 100%
> rename from patches/qemu-11.0.3/series
> rename to patches/qemu-11.1.0/series
> diff --git a/rules/qemu.make b/rules/qemu.make
> index aee3848dab4d..1d8f240f5ffe 100644
> --- a/rules/qemu.make
> +++ b/rules/qemu.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_ARCH_LP64)-$(PTXCONF_QEMU) += qemu
>  #
>  # Paths and names
>  #
> -QEMU_VERSION := 11.0.3
> -QEMU_SHA256  := 
> da5fcffc32762820568b828ed430a728864d34d50b6d2f30358597760cbb0523
> +QEMU_VERSION := 11.1.0
> +QEMU_SHA256  := 
> 6ee1d1a61f68212476b27108c26da5f449dc09b626d42f8279ba0dc2e08fa858
>  QEMU         := qemu-$(QEMU_VERSION)
>  QEMU_SUFFIX  := tar.xz
>  QEMU_URL     := https://download.qemu.org/$(QEMU).$(QEMU_SUFFIX)
> @@ -110,10 +110,8 @@ QEMU_CONF_OPT    := \
>       --disable-gcrypt \
>       --disable-gettext \
>       --disable-gio \
> -     --disable-glusterfs \
>       --disable-gnutls \
>       --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk \
> -     --$(call ptx/endis, PTXCONF_QEMU_GTK)-gtk-clipboard \
>       --disable-guest-agent \
>       --disable-guest-agent-msi \
>       --disable-hv-balloon \
> @@ -147,6 +145,7 @@ QEMU_CONF_OPT     := \
>       --enable-multiprocess \
>       --disable-netmap \
>       --disable-nettle \
> +     --disable-nitro \
>       --disable-numa \
>       --disable-nvmm \
>       --disable-opengl \
> @@ -162,6 +161,7 @@ QEMU_CONF_OPT     := \
>       --disable-qatzip \
>       --disable-qcow1 \
>       --disable-qed \
> +     --disable-qemu-vnc \
>       --disable-qga-vss \
>       --disable-qpl \
>       --disable-rbd \

Reply via email to