Hi everyone, I am pleased to announce that the QEMU v1.6.1 stable release is now available at:
http://wiki.qemu.org/download/qemu-1.6.1.tar.bz2 v1.6.1 is now tagged in the official qemu.git repository, and the stable-1.6 branch has been updated accordingly: http://git.qemu.org/?p=qemu.git;a=shortlog;h=refs/heads/stable-1.6 This release contains 48 build/bug fixes, including an important security fix for CVE-2013-4344 involving SCSI disk emulation: http://www.openwall.com/lists/oss-security/2013/10/02/2 Fixed by: scsi: Allocate SCSITargetReq r->buf dynamically Thank you to everyone involved! 62ecc3a: Update VERSION for 1.6.1 release (Michael Roth) fdcbe7d: scsi: Allocate SCSITargetReq r->buf dynamically (Asias He) 1b5f770: qemu: Add qemu xen logic for Xen HVM S3 resume (Liu, Jinsong) bc05a48: qemu: Adjust qemu wakeup (Liu, Jinsong) ba20326: coroutine: add ./configure --disable-coroutine-pool (Stefan Hajnoczi) ae00a27: piix4: disable io on reset (Michael S. Tsirkin) 61fbeb6: vmdk: fix cluster size check for flat extents (Fam Zheng) fc06b43: rbd: avoid qemu_rbd_snap_list() memory leaks (Stefan Hajnoczi) 6bbb9d8: tap: Use numbered tap/tun devices on all *BSD OS's (Brad Smith) b314120: iov: avoid "orig_len may be used unitialized" warning (Michael Tokarev) dc6fbaa: xhci: emulate intr endpoint intervals correctly (Gerd Hoffmann) c8adc0d: virtio-blk: do not relay a previous driver's WCE configuration to the current (Paolo Bonzini) aeab582: blockdev: do not default cache.no-flush to true (Paolo Bonzini) 5c20c1f: tci: Fix qemu-alpha on 32 bit hosts (wrong assertions) (Stefan Weil) 5d2de77: kvmvapic: Clear also physical ROM address when entering INACTIVE state (Jan Kiszka) 7ea8a3c: kvmvapic: Enter inactive state on hardware reset (Jan Kiszka) 50b31e8: kvmvapic: Catch invalid ROM size (Jan Kiszka) 4b5b472: chardev: fix pty_chr_timer (Gerd Hoffmann) 76f6989: pcnet-pci: mark I/O and MMIO as LITTLE_ENDIAN (Aurelien Jarno) 8b4b3a7: qapi-types.py: Fix enum struct sizes on i686 (Cole Robinson) 41900b0: pc_q35: Initialize Xen. (Anthony PERARD) 755ec4c: pc: Initializing ram_memory under Xen. (Anthony PERARD) dc0973b: qxl: fix local renderer (Gerd Hoffmann) b6d163f: ehci: save device pointer in EHCIState (Gerd Hoffmann) a1991d0: ne2000: mark I/O as LITTLE_ENDIAN (Aurelien Jarno) 1110014: exec: check offset_within_address_space for register subpage (Hu Tao) 2a93d3d: Revert "memory: Return -1 again on reads from unsigned regions" (Jan Kiszka) 7ab1044: memory: Provide separate handling of unassigned io ports accesses (Jan Kiszka) e8601a4: w32: Fix access to host devices (regression) (Stefan Weil) 96b14d0: usb: parallelize usb3 streams (Gerd Hoffmann) 9dbfbb8: xhci: reset port when disabling slot (Gerd Hoffmann) 57ea2d2: exec: always use MADV_DONTFORK (Andrea Arcangeli) 1cd7138: virtio_pci: fix level interrupts with irqfd (Michael S. Tsirkin) 9fab8e1: exec: fix writing to MMIO area with non-power-of-two length (Paolo Bonzini) 2ffbe03: adlib: sort offsets in portio registration (Hervé Poussineau) f9fd82e: target-i386: fix disassembly with PAE=1, PG=0 (Paolo Bonzini) da4e203: block: expect errors from bdrv_co_is_allocated (Paolo Bonzini) c09a463: Revert "usb-hub: report status changes only once" (Gerd Hoffmann) c0a5eb8: xhci: fix endpoint interval calculation (Gerd Hoffmann) 358bb0d: virtio: virtqueue_get_avail_bytes: fix desc_pa when loop over the indirect descriptor table (yinyin) 3fe494e: pseries: Fix stalls on hypervisor virtual console (Anton Blanchard) a73c74f: pc: fix regression for 64 bit PCI memory (Michael S. Tsirkin) 964e0d4: scsi: Fix scsi_bus_legacy_add_drive() scsi-generic with serial (Markus Armbruster) 11b0ab7: usb/dev-hid: Modified usb-tablet category from Misc to Input (Marcel Apfelbaum) d6dcfd6: scripts/qapi.py: Avoid syntax not supported by Python 2.4 (Peter Maydell) 2607906: rdma: silly ipv6 bugfix (Michael R. Hines) 52f99b0: target-ppc: fix bit extraction for FPBF and FPL (Aurelien Jarno) c0c080c: gdbstub: Fix gdb_register_coprocessor() register counting (Andreas Färber) 670599a: block: ensure bdrv_drain_all() works during bdrv_delete() (Stefan Hajnoczi)