Change log for qemu package in Debian
| 1 → 75 of 316 results | First • Previous • Next • Last |
| Published in sid-release |
qemu (1:8.2.3+ds-2) unstable; urgency=medium
* d/changelog: add Closes: for security bugs fixed by 8.2.3
* static-linux-user-stubs: provide some stubs for static linux-user
build (this avoids ld warnings about getpw*())
* add 3 missing upstream commits to fix 8.2.3 breakage on riscv64
The broken commit is 1e4ec0958e "target/riscv/kvm: fix
timebase-frequency when using KVM acceleration", which requires
other changes in the same patch series:
target-riscv-kvm-change-KVM_REG_RISCV_FP_F-to-u32.patch
target-riscv-kvm-change-KVM_REG_RISCV_FP_D-to-u64.patch
target-riscv-kvm-change-timer-regs-size-to-u64.patch
(Closes: #1069892)
-- Michael Tokarev <email address hidden> Sat, 27 Apr 2024 20:09:22 +0300
| Superseded in sid-release |
qemu (1:8.2.3+ds-1) unstable; urgency=medium [ Michael Tokarev ] * new upstream stable/bugfix release * fix typo in newly added change (expection) * d/rules: run dh_installdocs for install-indep too [ Sergio Durigan Junior ] * d/control: Fix typo in long description of qemu-system-gui package -- Michael Tokarev <email address hidden> Thu, 25 Apr 2024 07:48:12 +0300
| Published in experimental-release |
qemu (1:9.0.0~rc2+ds-1) experimental; urgency=medium
* new upstream RC
* remove hw-i386-fw_cfg.c-fix-non-legacy-smbios-build.patch
(not needed anymore)
* d/source/lintian-overrides: source-is-missing: pc-bios/hppa-firmware64.img
* d/rules: run dh_installdocs for install-indep too
-- Michael Tokarev <email address hidden> Wed, 03 Apr 2024 15:43:26 +0300
| Superseded in experimental-release |
qemu (1:9.0.0~rc0+ds-2) experimental; urgency=medium
* +meson-Fix-MESONINTROSPECT-parsing.patch
fix build in a dir containing tilde (~) or other special chars
-- Michael Tokarev <email address hidden> Mon, 25 Mar 2024 20:29:21 +0300
| Superseded in sid-release |
qemu (1:8.2.2+ds-2) unstable; urgency=medium
* d/control: fix qemu version in Breaks: to include the missing epoch
(Closes: #1065469)
* d/rules: remove x32 from qemu-user host arch list and add it to tools
-- Michael Tokarev <email address hidden> Tue, 05 Mar 2024 10:27:47 +0300
| Superseded in sid-release |
qemu (1:8.2.2+ds-1) unstable; urgency=medium
* new upstream stable/bugfix release
* d/gen-module-upgrade.sh: change addfr() for clarity
* d/rules: stop qemu-system-${arch} packages from providing themselves
(different fix, really closes: #1063233)
* d/rules: ensure ${sysdataidir} is created in pre-install-indep
* d/control: stop build-depending on texinfo (not used)
* d/rules: build docs directly with sphinx, --disable-docs, install more docs
* move system docs to qemu-system-data
* d/rules: stop compressing config examples
* d/control: bc isn't needed for u-boot anymore
* d/copyright: exclude python/wheels/*.whl (not used on debian)
* remove patch included upstream now:
ui-clipboard-mark-type-as-not-available-when-no-data-CVE-2023-6683.patch
* d/rules: disable building qemu-system on x32
* remove disable-xen-on-x32.patch
-- Michael Tokarev <email address hidden> Mon, 04 Mar 2024 22:55:03 +0300
| Superseded in sid-release |
qemu (1:8.2.1+ds-2) unstable; urgency=medium
* rework module-upgrade handling: do not ship /run/qemu.mount unit
anymore, instead bind-mount-exec particular subdir in /run/qemu/
on upgrade only if some qemu-system-foo processes are running
* d/control: Rules-Requires-Root: no
* d/control: Standards-Version: 4.6.2
* d/rules: stop qemu-system-${arch} packages
from providing themselves (Closes: #1063233)
* d/rules: run ./configure in arch-indep build
and build some roms from there
* build x86 optionrom using qemu build rules
* d/rules: move fragments which builds firmware out of qemu
arch-indep subdir closer together (no code changes)
* d/control: clarify qemu-system-gui description:
this is not a management gui for qemu
* d/control: set minimum version for libpipewire (for bullseye)
* d/control: require recent python3 or separate tomli (for bullseye)
-- Michael Tokarev <email address hidden> Sat, 24 Feb 2024 12:19:35 +0300
| Published in bookworm-release |
qemu (1:7.2+dfsg-7+deb12u5) bookworm; urgency=medium
* +revert-monitor-only-run-coroutine-commands-in-qemu_aio_context.patch
Revert a single upstream change in 7.2.9 which, while fixed a few qemu
lockup bugs, introduced a regression in suspend-resume-hibernate cycle
(triggered by cryptsetup autopkgtest)
-- Michael Tokarev <email address hidden> Tue, 06 Feb 2024 20:38:06 +0300
| Superseded in sid-release |
qemu (1:8.2.1+ds-1) unstable; urgency=medium * new upstream stable/bugfix release * remove all upstream-applied patches * d/patches/note-missing-module-pkg-name.diff: fixup * replace fix for CVE-2023-6683 (A different fix from upstream) * remove the mistakenly-added temp file in d/qemu-block-extra/ * d/.gitignore: refresh -- Michael Tokarev <email address hidden> Tue, 30 Jan 2024 10:32:17 +0300
| Superseded in sid-release |
qemu (1:8.2.0+ds-5) unstable; urgency=medium
* d/rules, d/run-qemu.mount: use dh_installsystemd to install run-qemu.mount
(Closes: #1060087)
* update hppa and seabios-hppa patch series
* ui-clipboard-avoid-crash-upon-request-when-clipboard-CVE-2023-6683.patch
(Closes: #1060749, CVE-2023-6683)
* +target-s390x-Fix-LAE-setting-a-wrong-access-register.patch
* +tcg-s390x-Fix-encoding-of-VRIc-VRSa-VRSc-insns.patch
fix chacha20 issue on s390x
* update hw-vfio-fix-iteration-over-global-VFIODevice-list.patch
-- Michael Tokarev <email address hidden> Thu, 18 Jan 2024 10:16:31 +0300
| Superseded in sid-release |
qemu (1:8.2.0+ds-4) unstable; urgency=medium
* d/rules: fix "tail -20" usage
* note-missing-module-pkg-name.diff: update, to be much more accurate
No more sporadic warnings about missing audio backends etc
* d/control: clarify qemu-system-gui and qemu-system-modules-* package
descriptions a little bit (#1059457)
* more fixups from the ML targetting stable:
+ hw-net-cadence_gem-fix-MDIO_OP_xxx-values.patch
+ tcg-ppc-use-new-registers-for-LQ-destination.patch
+ target-riscv-fix-mcycle-minstret-increment-behavior.patch
* a bunch of hppa and seabios-hppa fixes targetting -stable for
https://gitlab.com/qemu-project/qemu/-/issues/2044
-- Michael Tokarev <email address hidden> Thu, 04 Jan 2024 22:47:59 +0300
| Superseded in sid-release |
qemu (1:8.2.0+ds-3) unstable; urgency=medium
* +virtio-net-correctly-copy-vnet-header-when-flushing-TX-CVE-2023-6693.patch
Fix CVE-2023-6693 (virtio-net: stack buffer overflow in virtio_net_flush_tx)
* +target-i386-the-sgx_epc_get_section-stub-is-reachable.patch
* +target-xtensa-fix-OOB-TLB-entry-access.patch
* d/rules: print last 20 lines of config.log & meson.log if ./configure fails
-- Michael Tokarev <email address hidden> Tue, 02 Jan 2024 15:54:35 +0300
| Superseded in sid-release |
qemu (1:8.2.0+ds-2) unstable; urgency=medium
* include-ui-rect.h-fix-qemu_rect_init-mis-assignment.patch
fixes virtio-gpu redraw issue (Closes: #1059211)
* hw-vfio-fix-iteration-over-global-VFIODevice-list.patch
fixes reboot issue with virtio-gpu
* target-i386-do-not-re-compute-new-pc-with-CF_PCREL.patch
fixes 4M edk2 stall in i386 tcg mode
* block-fix-crash-when-loading-snapshot-on-inactive-no.patch
fix possible assertion failure when loading snapshot
-- Michael Tokarev <email address hidden> Tue, 02 Jan 2024 12:10:14 +0300
| Superseded in sid-release |
qemu (1:8.2.0+ds-1) unstable; urgency=medium
* new upstream release 8.2.0
Closes: #1013952
* d/rules: re-enable building static-pie binaries (the default) for
qemu-user-static again (formally Closes: #1053101, LP:#1908331)
* d/rules: add --disable-pie for static build on i386 due to #1056739
* d/control: qemu-system-x86 depends on seabios >>1.16.3-1 due to ahci fix
* d/qemu-user-static.lintian-overrides: +shared-library-lacks-prerequisites
for static-pie executables
* d/rules: omit qemu-user-static package from dh_shlibdeps run
since dpkg-shlibdeps complains about static-pie binaries
* d/rules: fix bugzilla.redhat.com url (migrated to issues.redhat.com)
* d/patches: remove patches applied upstream
* d/patches, d/rules: use --disable-relocatable instead of a patch
* d/patches: refresh disable-xen-on-x32.patch
* d/control: --enable-pixman (which is optional now)
* d/rules: vnc needs pixman too (for xen and microvm builds)
* d/copyright: stop excluding subprojects/dtc (not included anymore)
* d/source/lintian-overrides: +source-is-missing for vdso.so files
-- Michael Tokarev <email address hidden> Wed, 20 Dec 2023 18:21:19 +0300
| Superseded in bookworm-release |
qemu (1:7.2+dfsg-7+deb12u3) bookworm; urgency=medium
* +hw-ide-ahci-fix-legacy-software-reset.patch - fix legacy ide regression
introduced in 7.2.6
* update to upstream 7.2.7 stable/bugfix release, v7.2.7.diff,
https://gitlab.com/qemu-project/qemu/-/commits/v7.2.7 :
- Update version for 7.2.7 release
- target/tricore: Rename tricore_feature
- tracetool: avoid invalid escape in Python string
- tests/tcg/s390x: Test LAALG with negative cc_src
- target/s390x: Fix LAALG not updating cc_src
- tests/qtest: ahci-test: add test exposing reset issue with pending callback
- hw/ide: reset: cancel async DMA operation before resetting state
- target/mips: Fix TX79 LQ/SQ opcodes
- target/mips: Fix MSA BZ/BNZ opcodes displacement
- ui/gtk-egl: apply scale factor when calculating window's dimension
- ui/gtk: force realization of drawing area
- ati-vga: Implement fallback for pixman routines
- block/nvme: nvme_process_completion() fix bound for cid
- target/arm: Correctly propagate stage 1 BTI guarded bit in a two-stage walk
- target/arm: Fix handling of SW and NSW bits for stage 2 walks
- target/arm: Don't allow stage 2 page table walks to downgrade to NS
- target/arm: Don't access TCG code when debugging with KVM
- Revert "linux-user: fix compat with glibc >= 2.36 sys/mount.h"
- Revert "linux-user: add more compat ioctl definitions"
- qemu-iotests: 024: add rebasing test case for overlay_size > backing_size
- qemu-img: rebase: stop when reaching EOF of old backing file
- tests/tcg: Add -fno-stack-protector
- tests/migration: Add -fno-stack-protector
- misc/led: LED state is set opposite of what is expected
- hw/sd/sdhci: Block Size Register bits [14:12] is lost
- lasips2: LASI PS/2 devices are not user-createable
- linux-user/sh4: Fix crashes on signal delivery
- linux-user/mips: fix abort on integer overflow
- migration: Fix analyze-migration read operation signedness
- hw/pvrdma: Protect against buggy or malicious guest driver
- disas/riscv: Fix the typo of inverted order of pmpaddr13 and pmpaddr14
- hw/audio/es1370: reset current sample counter
- migration/qmp: Fix crash on setting tls-authz with null
- amd_iommu: Fix APIC address check
- linux-user/hppa: Fix struct target_sigcontext layout
- chardev/char-pty: Avoid losing bytes when the other side just
(re-)connected
- hw/display/ramfb: plug slight guest-triggerable leak on mode setting
- target/i386: fix memory operand size for CVTPS2PD
- target/i386: generalize operand size "ph" for use in CVTPS2PD
- target/i386: Fix exception classes for MOVNTPS/MOVNTPD.
- target/i386: Fix exception classes for SSE/AVX instructions.
- target/i386: Fix and add some comments next to SSE/AVX instructions.
- tests/tcg/i386: correct mask for VPERM2F128/VPERM2I128
- target/i386: fix operand size of unary SSE operations
- scsi-disk: ensure that FORMAT UNIT commands are terminated
- esp: restrict non-DMA transfer length to that of available data
- esp: use correct type for esp_dma_enable() in sysbus_esp_gpio_demux()
- optionrom: Remove build-id section
- ui/vnc: fix handling of VNC_FEATURE_XVP
- ui/vnc: fix debug output for invalid audio message
- hw/scsi/scsi-disk: Disallow block sizes smaller than 512 [CVE-2023-42467]
- accel/tcg: mttcg remove false-negative halted assertion
- target/arm: Don't skip MTE checks for LDRT/STRT at EL0
- hw/cxl: Fix CFMW config memory leak
- linux-user/hppa: lock both words of function descriptor
- linux-user/hppa: clear the PSW 'N' bit when delivering signals
- hw/ppc: Always store the decrementer value
- target/ppc: Decrementer fix BookE semantics
- target/ppc: Sign-extend large decrementer to 64-bits
- hw/ppc: Avoid decrementer rounding errors
- hw/ppc: Round up the decrementer interval when converting to ns
- host-utils: Add muldiv64_round_up
- hw/ppc: Introduce functions for conversion between timebase and nanoseconds
* update to upstream 7.2.6 stable/bugfix release, v7.2.6.diff,
https://gitlab.com/qemu-project/qemu/-/commits/v7.2.6 :
- Update version for 7.2.6 release
- tpm: fix crash when FD >= 1024 and unnecessary errors due to EINTR
- s390x/ap: fix missing subsystem reset registration
- ui: fix crash when there are no active_console
- hw/tpm: TIS on sysbus: Remove unsupport ppi command line option
- target/riscv/pmp.c: respect mseccfg.RLB for pmpaddrX changes
- hw/riscv: virt: Fix riscv,pmu DT node path
- linux-user/riscv: Use abi type for target_ucontext
- hw/intc: Make rtc variable names consistent
- hw/intc: Fix upper/lower mtime write calculation
- hw/char/riscv_htif: Fix printing of console characters on big endian hosts
- arm64: Restore trapless ptimer access
- virtio: Drop out of coroutine context in virtio_load()
- qxl: don't assert() if device isn't yet initialized
- hw/net/vmxnet3: Fix guest-triggerable assert()
- docs tests: Fix use of migrate_set_parameter
- qemu-options.hx: Rephrase the descriptions of the -hd* and -cdrom options
- hw/i2c/aspeed: Fix TXBUF transmission start position error
- hw/i2c/aspeed: Fix Tx count and Rx size error in buffer pool mode
- hw/ide/ahci: fix broken SError handling
- hw/ide/ahci: fix ahci_write_fis_sdb()
- hw/ide/ahci: PxCI should not get cleared when ERR_STAT is set
- hw/ide/ahci: PxSACT and PxCI is cleared when PxCMD.ST is cleared
- hw/ide/ahci: simplify and document PxCI handling
- hw/ide/ahci: write D2H FIS when processing NCQ command
- hw/ide/core: set ERR_STAT in unsupported command completion
- target/ppc: Flush inputs to zero with NJ in ppc_store_vscr
- ppc/vof: Fix missed fields in VOF cleanup
- hw/ppc/e500: fix broken snapshot replay
- block-migration: Ensure we don't crash during migration cleanup
- docs/about/license: Update LICENSE URL
- target/arm: Fix 64-bit SSRA
- target/arm: Fix SME ST1Q
- accel/kvm: Specify default IPA size for arm64
- kvm: Introduce kvm_arch_get_default_type hook
- include/hw/virtio/virtio-gpu: Fix virtio-gpu with blob on big endian hosts
- target/s390x: Check reserved bits of VFMIN/VFMAX's M5
- target/s390x: Fix VSTL with a large length
- target/s390x: Use a 16-bit immediate in VREP
- target/s390x: Fix the "ignored match" case in VSTRS
- Fixed incorrect LLONG alignment for openrisc and cris
- include/exec/user: Set ABI_LLONG_ALIGNMENT to 4 for nios2
- include/exec/user: Set ABI_LLONG_ALIGNMENT to 4 for microblaze
- linux-user/elfload: Set V in ELF_HWCAP for RISC-V
- hw/nvme: fix CRC64 for guard tag
- dump: kdump-zlib data pages not dumped with pvtime/aarch64
- hw/smbios: Fix core count in type4
- hw/smbios: Fix thread count in type4
- hw/smbios: Fix smbios_smp_sockets caculation
- machine: Add helpers to get cores/threads per socket
- pnv_lpc: disable reentrancy detection for lpc-hc
- loongarch: mark loongarch_ipi_iocsr re-entrnacy safe
- apic: disable reentrancy detection for apic-msi
- raven: disable reentrancy detection for iomem
- bcm2835_property: disable reentrancy detection for iomem
- lsi53c895a: disable reentrancy detection for MMIO region, too
- lsi53c895a: disable reentrancy detection for script RAM
- hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
- checkpatch: add qemu_bh_new/aio_bh_new checks
- async: avoid use-after-free on re-entrancy guard
- async: Add an optional reentrancy guard to the BH API
- memory: prevent dma-reentracy issues
- python: drop pipenv
- gitlab-ci: check-dco.py: switch from master to stable-7.2 branch
-- Michael Tokarev <email address hidden> Sun, 03 Dec 2023 15:36:08 +0300
| Deleted in experimental-release (Reason: None provided.) |
qemu (1:8.2.0~rc2+ds-1) experimental; urgency=medium
* v8.2.0-rc2
* d/control: qemu-system-x86 depends on seabios >>1.16.3-1 due to ahci fix
* d/rules: --disable-pie for static build on i386 due to #1056739
* d/qemu-user-static.lintian-overrides: +shared-library-lacks-prerequisites
for static-pie executables
-- Michael Tokarev <email address hidden> Thu, 30 Nov 2023 19:23:33 +0300
| Superseded in experimental-release |
qemu (1:8.2.0~rc1+ds-1) experimental; urgency=medium * v8.2.0-rc1 * d/patches: remove patches applied upstream * d/patches, d/rules: use --disable-relocatable instead of a patch * d/patches: refresh disable-xen-on-x32.patch * d/control: --enable-pixman (which is optional now) * d/rules: vnc needs pixman too (for xen and microvm builds) * d/copyright: stop excluding subprojects/dtc (not included anymore) * d/source/lintian-overrides: +source-is-missing for vdso.so files * d/rules: re-enable --static-pie for qemu-user-static (LP:#1908331, #1053101, https://sourceware.org/bugzilla/show_bug.cgi?id=29514) Let's see how it works out. -- Michael Tokarev <email address hidden> Thu, 23 Nov 2023 22:46:34 +0300
| Superseded in sid-release |
qemu (1:8.1.3+ds-1) unstable; urgency=medium
* new upstream stable/bugfix release
* remove patches applied upstream:
- linux-user-Fixes-for-zero_bss.patch
- target-mips-Fix-MSA-BZ-BNZ-opcodes-displacement.patch
- hw-ide-reset-cancel-async-DMA-operation-before-reset.patch
* d/control, d/qemu-system-gui.install: enable pipewire audio support
(Closes: #1055221)
-- Michael Tokarev <email address hidden> Wed, 22 Nov 2023 17:56:06 +0300
| Superseded in experimental-release |
qemu (1:8.2.0~rc0+ds-1) experimental; urgency=medium
* v8.2.0-rc0
* d/patches: remove patches applied upstream
* d/patches, d/rules: use --disable-relocatable instead of a patch
* d/patches: refresh disable-xen-on-x32.patch
* d/control: --enable-pixman (which is optional now)
* d/rules: vnc needs pixman too (for xen and microvm builds)
* d/copyright: stop excluding subprojects/dtc (not included anymore)
* d/source/lintian-overrides: +source-is-missing for vdso.so files
* +spelling.patch
* d/control, d/qemu-system-gui.install: enable pipewire audio support
(Closes: #1055221)
* d/changelog: remove trailing whitespace
-- Michael Tokarev <email address hidden> Wed, 15 Nov 2023 15:55:27 +0300
| Superseded in sid-release |
qemu (1:8.1.2+ds-1) unstable; urgency=medium
* upstream 8.1.2 stable/bugfix release
* remove all stable-staging/ patches and two more
(all included into 8.1.2)
* d/rules: microvm build: do not explicitly enable avx2
-- Michael Tokarev <email address hidden> Tue, 17 Oct 2023 09:44:39 +0300
| Superseded in sid-release |
qemu (1:8.1.1+ds-2) unstable; urgency=medium
* d/rules: fix binary target to produce both arch and indep
binaries instead of omitting indep one(s)
* d/patches: sync with current staging-8.1 branch, many new fixes
* additional fixes:
+hw-ide-ahci-fix-legacy-software-reset.patch
+target-mips-Fix-MSA-BZ-BNZ-opcodes-displacement.patch
+hw-ide-reset-cancel-async-DMA-operation-before-reset.patch
-- Michael Tokarev <email address hidden> Sun, 08 Oct 2023 12:28:55 +0300
| Published in bullseye-release |
qemu (1:5.2+dfsg-11+deb11u3) bullseye; urgency=medium * CVE-2021-20196 (Closes: #984453) * CVE-2023-0330 (Closes: #1029155) * CVE-2023-1544 (Closes: #1034179) * CVE-2023-3354 * CVE-2021-3930 * CVE-2023-3180 * CVE-2021-20203 (Closes: #984452) * CVE-2021-3507 (Closes: #987410) * CVE-2020-14394 (Closes: #979677) * CVE-2023-3301 * CVE-2022-0216 (Closes: #1014590) -- Moritz Mühlenhoff <email address hidden> Mon, 04 Sep 2023 16:11:35 +0200
| Superseded in bookworm-release |
qemu (1:7.2+dfsg-7+deb12u2) bookworm; urgency=medium
* d/rules: add the forgotten --enable-virtfs for the xen build.
This makes 9pfs virtual filesystem available for xen hvm domUs.
This adds no new runtime dependencies. Closes: #1049925.
* update to upstream 7.2.5 stable/bugfix release, v7.2.5.diff,
https://gitlab.com/qemu-project/qemu/-/commits/v7.2.5 :
- hw/ide/piix: properly initialize the BMIBA register
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)
- qemu-nbd: pass structure into nbd_client_thread instead of plain char*
- qemu-nbd: fix regression with qemu-nbd --fork run over ssh
- qemu-nbd: regression with arguments passing into nbd_client_thread()
- target/s390x: Make CKSM raise an exception if R2 is odd
- target/s390x: Fix CLM with M3=0
- target/s390x: Fix CONVERT TO LOGICAL/FIXED with out-of-range inputs
- target/s390x: Fix ICM with M3=0
- target/s390x: Make MC raise specification exception when class >= 16
- target/s390x: Fix assertion failure in VFMIN/VFMAX with type 13
- target/loongarch: Fix the CSRRD CPUID instruction on big endian hosts
- virtio-pci: add handling of PCI ATS and Device-TLB enable/disable
- vhost: register and change IOMMU flag depending on Device-TLB state
- virtio-net: pass Device-TLB enable/disable events to vhost
- hw/arm/smmu: Handle big-endian hosts correctly
- target/arm: Avoid writing to constant TCGv in trans_CSEL()
- target/ppc: Disable goto_tb with architectural singlestep
- linux-user/armeb: Fix __kernel_cmpxchg() for armeb
- qga/win32: Use rundll for VSS installation
- thread-pool: signal "request_cond" while locked
- xen-block: Avoid leaks on new error path
- io: remove io watch if TLS channel is closed during handshake
- target/nios2: Pass semihosting arg to exit
- target/nios2: Fix semihost lseek offset computation
- target/m68k: Fix semihost lseek offset computation
- hw/virtio-iommu: Fix potential OOB access in virtio_iommu_handle_command()
- virtio-crypto: verify src&dst buffer length for sym request
- target/hppa: Move iaoq registers and thus reduce generated code size
- pci: do not respond config requests after PCI device eject
- hw/i386/intel_iommu: Fix trivial endianness problems
- hw/i386/intel_iommu: Fix endianness problems related to VTD_IR_TableEntry
- hw/i386/intel_iommu: Fix struct VTDInvDescIEC on big endian hosts
- hw/i386/intel_iommu: Fix index calculation in vtd_interrupt_remap_msi()
- hw/i386/x86-iommu: Fix endianness issue in x86_iommu_irq_to_msi_message()
- include/hw/i386/x86-iommu: Fix struct X86IOMMU_MSIMessage for big endian hosts
- vfio/pci: Disable INTx in vfio_realize error path
- vdpa: Fix possible use-after-free for VirtQueueElement
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mac()
- vdpa: Return -EIO if device ack is VIRTIO_NET_ERR in _load_mq()
- target/ppc: Implement ASDR register for ISA v3.0 for HPT
- target/ppc: Fix pending HDEC when entering PM state
- target/ppc: Fix VRMA page size for ISA v3.0
- target/i386: Check CR0.TS before enter_mmx
- Update version for 7.2.5 release
Closes: CVE-2023-3255, CVE-2023-3354, CVE-2023-3180
-- Michael Tokarev <email address hidden> Thu, 17 Aug 2023 12:33:57 +0300
| Superseded in sid-release |
qemu (1:8.1.1+ds-1) unstable; urgency=medium
* new upstream stable/bugfix release
* remove all stable-staging/ patches, keep
softmmu-Use-async_run_on_cpu-in-tcg_commit.patch
* vfio-display-fix-missing-update-to-set-backing-field.patch
* scsi-disk-disallow-small-block-sizes-CVE-2023-42467.patch
(Closes: #1051899, CVE-2023-42467)
* migration-qmp-Fix-crash-on-setting-tls-authz-with-nu.patch
* d/patches/move-vl-opts/ - stop linking everything with async-teardown.c,
un-FTBFS on ia64
* d/control: minor: remove old todo comments
* d/control: disable rbd (ceph) on 32bit platforms (Closes: #1053172)
* d/control: enable rbd on riscv64 once it's built there
* d/copyright: also remove subprojects/dtc
-- Michael Tokarev <email address hidden> Sun, 01 Oct 2023 22:11:24 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-6) unstable; urgency=medium
* re-enable softmmu-Use-async_run_on_cpu-in-tcg_commit.patch
* add https://<email address hidden>/msg989073.html
fixing https://gitlab.com/qemu-project/qemu/-/issues/1866
* d/rules: reorder some definitions to evaluate in proper order
-- Michael Tokarev <email address hidden> Wed, 20 Sep 2023 23:31:59 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-5) unstable; urgency=medium
* disable softmmu-Use-async_run_on_cpu-in-tcg_commit.patch
The change in softmmu-Use-async_run_on_cpu-in-tcg_commit.patch
which is a fix for https://gitlab.com/qemu-project/qemu/-/issues/1864
(x86 VM with TCG and SMP fails to start on 8.1.0)
introduces https://gitlab.com/qemu-project/qemu/-/issues/1866
* more patches from stable-staging
* re-introduce qemu-debootstrap for now until all users of it will
be converted to regular debootstrap
-- Michael Tokarev <email address hidden> Sun, 17 Sep 2023 19:10:34 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-4) unstable; urgency=medium
* d/changelog: fix spelling
* +linux-user-Fixes-for-zero_bss.patch: fix linux-user zero_bss bug
* many small changes for d/rules
* d/rules: split out qemu-user build out out of main qemu build
When both system and linux-user builds are enabled, linux-user
build is getting features only relevant for system (softmmu)
configuration, like linking with liburing, libnuma and other
softmmu-only stuff. So build it separately.
This not only makes qemu-user smaller and neater, but it also
makes Built-Using field for qemu-user-static (which is generated
from Depends field of qemu-user) accurate.
* d/qemu-user[-static].docs: use unprocessed .rst doc instead of html
* d/rules: check for nocheck in DEB_BUILD_PROFILES too,
not only DEB_BUILD_OPTIONS
* d/rules, d/control: disable build-time test due to apparent dak bug
-- Michael Tokarev <email address hidden> Mon, 11 Sep 2023 14:19:32 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-3) unstable; urgency=medium
* d/control: split out most of Build-Depends to Build-Depends-Arch, in order
to break B-D loop on qemu-system-data (it is only needed for -Arch) and
to reduce arch-all build time.
Only very few things left in common Build-Depends.
* Removing most things from B-D discovered that skiboot includes openssl
header(s) (!), so add libssl-dev to Build-Depends-Indep.
* d/control,d/rules: introduce build profiles to omit bulding some packages
(mostly debugging aid, to reduce test build run time).
* d/rules: use ninja directly for various qemu builds
(non-verbose build now shows errors/warnings nicely)
* d/control: Rules-Requires-Root: "binary-targets", not "no", -
this enables building as non-root, finally
* d/rules: add forgotten -p for mkdir b/user-static
* d/not-installed: list 2 files from user/ manual
(which is built even on unsupported architectures)
-- Michael Tokarev <email address hidden> Sun, 10 Sep 2023 01:30:15 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-2) unstable; urgency=medium
* d/control: fix descriptions of qemu-system-gui and
qemu-system-modules-spice packages
* update lintian-overrides
* d/rules: enable verbose (-v) build for qboot
* d/rules: move lto control to where it actually works
* d/rules: remove usage of "standard dh sequencer".
It has mutliple issues. To name a few:
- it exports CFLAGS &Co which breaks badly when trying to compile
bios/firmware code (fixes FTBFS with new -fcf-protection)
- it performs multiple recursive calls to d/rules which is
slow when make variables are set using $(shell), - annoying
when debugging
- it hides actual actions being done at install/binary stages
- it is confusing in override_dh_foo{,-indep,-arch}
- it does just too much unknown magic, - just give the control
back.
-- Michael Tokarev <email address hidden> Sat, 09 Sep 2023 22:37:02 +0300
| Superseded in sid-release |
qemu (1:8.1.0+ds-1) unstable; urgency=medium * d/changelog: mention closing of #984451, CVE-2021-20255 by 8.1 * d/changelog: mention closing of #1041471 by 8.1 * d/patches: add patches currenly staged for 8.1.1 * d/gbp.conf: switch from experimental to master * upload to unstable -- Michael Tokarev <email address hidden> Sat, 09 Sep 2023 17:03:54 +0300
| Deleted in experimental-release (Reason: None provided.) |
qemu (1:8.1.0+ds-1~exp2) experimental; urgency=medium
* qemu-system-modules-spice & qemu-system-modules-opengl packages,
containing optional spice and opengl modules from qemu-system-common.
Both are recommended by all qemu-system-* but can be removed if not
used, to reduce list of dependencies.
-- Michael Tokarev <email address hidden> Wed, 23 Aug 2023 12:37:55 +0300
| Superseded in experimental-release |
qemu (1:8.1.0+ds-1~exp1) experimental; urgency=medium
* new upstream release
Closes: #1041102, CVE-2023-3019 (NIC DMA reentrancy issue, problem class)
Closes: CVE-2021-3750 (DMA MMIO reentrancy issue, problem class)
* d/watch: change repack suffix to +ds
* d/patches: remove patches applied upstream
* disable-xen-on-x32.patch: refresh
* d/copyright: stop stripping dtc/ and meson/, removed upstream
* d/rules: replace --with-git-submodules=ignore with --disable-download
* d/control: build-depend on python3-venv
* d/control: bump minimum meson version to 0.63.0
* d/control: build-depend on seabios & qemu-system-data for the testsuite.
qemu testsuite runs qemu-system binaries which require firmware even for
simple tests
* d/rules: run `make check-block' after the main build, as a minimal test
for now
* qemu-img-omit-errno-value-in-error-message.patch fixes check-block tests
on mips* where errno values are different from other architectures.
* late fix for 8.1 linux-user-Adjust-brk-for-load_bias.patch
-- Michael Tokarev <email address hidden> Wed, 23 Aug 2023 08:01:13 +0300
| Superseded in sid-release |
qemu (1:8.0.4+dfsg-3) unstable; urgency=medium
* d/rules: export PYTHONDONTWRITEBYTECODE=1 to stop generating .pyc files
(Closes: #1046056)
* d/control: list more CPU types emulated by qemu in package descriptions
* d/control: refine qemu-system-gui package description
* d/rules: remove --interp-prefix= configure option
* late fix for 8.1: target-arm-Fix-SME-ST1Q.patch
* late fix for 8.1: target-arm-Fix-64-bit-SSRA.patch
* d/control: remove old versions from build-deps
-- Michael Tokarev <email address hidden> Tue, 22 Aug 2023 20:15:07 +0300
| Superseded in sid-release |
qemu (1:8.0.4+dfsg-2) unstable; urgency=medium
* remove linux-user-show-heap-address-in-proc-pid-maps.patch
* pick 2 nvme fixes from upstream:
- hw-nvme-fix-oob-memory-read-in-fdp-events-log-CVE-2023-4135.patch
Closes: #1050142, CVE-2023-4135
- hw-nvme-fix-null-pointer-access-in-directive-receive-CVE-2023-40360.patch
Closes: #1050140, CVE-2023-40360
* d/rules: --enable-virtfs (--enable-attr --enable-cap-ng) for xen build
to enable 9pfs (Closes: #1049925)
* d/rules: run-qemu.mount is linux-specific too
(if we ever do non-linux system build)
* d/control: disable sndio on debian too (disabled on ubuntu), for now anyway
* d/*.install, d/rules: explicitly list all qemu-system modules
* d/control: build-depend on libglib2.0-dev (forgotten!) and zlib1g-dev,
move the two to the top before all optional deps
* d/changelog: fix 7.1+dfsg-1 changelog entry (qemu-user and qemu-system)
-- Michael Tokarev <email address hidden> Mon, 21 Aug 2023 09:57:59 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc4+ds-4) experimental; urgency=medium * d/qemu-system-common.install: fix output for dh_install -- Michael Tokarev <email address hidden> Sun, 20 Aug 2023 20:58:26 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc4+ds-2) experimental; urgency=medium * d/rules: remove b/qemu/qemu-bundle before running tests -- Michael Tokarev <email address hidden> Sat, 19 Aug 2023 14:46:58 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc4+ds-1) experimental; urgency=medium
* new upstream rc
* d/watch: change repack suffix from dfsg to ds
* d/rules: --enable-virtfs (--enable-attr --enable-cap-ng) for xen build
to enable 9pfs (Closes: #1049925)
* move accel-tcg-i386.so & accel-tcg-x86_64.so qemu-system-common => -x86
* d/rules: run-qemu.mount is linux-specific too
(if we ever do non-linux system build)
* d/control: disable sndio on debian too, for now anyway
* d/*.install, d/rules: explicitly list all qemu-system modules
* add 2 patches to fix building in directory like qemu-8.1.0~rc4 (tilde)
* late fix for 8.1: linux-user-Adjust-brk-for-load_bias.patch
* late fix for 8.1: target-arm-Fix-SME-ST1Q.patch
-- Michael Tokarev <email address hidden> Sat, 19 Aug 2023 11:50:07 +0300
| Superseded in sid-release |
qemu (1:8.0.4+dfsg-1) unstable; urgency=medium
* new upstream stable/bugfix release
Closes: CVE-2023-3180 (virtual crypto virtio_crypto_handle_sym_req)
Closes: CVE-2023-3354 (VNC server QIOChannel NULL ptr deref)
Closes: CVE-2023-3255 (VNC: infinite loop in inflate_buffer)
* d/patches: remove patches picked up from stable-staging branch
which are applied in 8.0.4
* d/control: build-depend on libglib2.0-dev (forgotten!) and zlib1g-dev,
move the two to the top before all optional deps
* remove xen-specific wrapper for qemu-system-i386
(needed for bookworm upgrade only)
-- Michael Tokarev <email address hidden> Fri, 11 Aug 2023 22:13:36 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc3+dfsg-2) experimental; urgency=medium
* remove xen-specific wrapper for qemu-system-i386
(needed for bookworm upgrade only)
* qemu-img-omit-errno-value-in-error-message.patch
fixes check-block tests on mips* where errno values
are different from other architectures.
* d/rules: run check-block tests only if enable-system
(it fails without)
-- Michael Tokarev <email address hidden> Fri, 11 Aug 2023 14:13:30 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc3+dfsg-1) experimental; urgency=medium
* new upstream RC (with a lot more linux-user fixes)
* d/control: build-depend on libglib2.0-dev (forgotten!) and zlib1g-dev,
move the two to the top before all optional deps
* d/control: build-depend on seabios & qemu-system-data for the testsuite.
qemu testsuite runs qemu-system binaries which require firmware even for
simple tests
* d/rules: run `make check-block' after the main build, as a minimal test
for now
-- Michael Tokarev <email address hidden> Fri, 11 Aug 2023 09:14:06 +0300
| Superseded in experimental-release |
qemu (1:8.1.0~rc2+dfsg-1) experimental; urgency=medium * new upstream RC * d/patches: remove patches applied upstream * disable-xen-on-x32.patch: refresh * d/copyright: stop stripping dtc/ and meson/, removed upstream * d/rules: replace --with-git-submodules=ignore with --disable-download * d/control: build-depend on python3-venv * d/control: bump minimum meson version to 0.63.0 -- Michael Tokarev <email address hidden> Fri, 04 Aug 2023 09:22:23 +0300
| Superseded in sid-release |
qemu (1:8.0.3+dfsg-5) unstable; urgency=medium
* remove previous 2 mmap/brk patches for now
linux-user-optimize-memory-layout-for-static-and-dyn.patch
linux-user-load-pie-executables-at-upper-memory.patch
These are intended for 8.1, and causes other issues on 8.0.
Closes: #1042808
Reopens: #1040981
-- Michael Tokarev <email address hidden> Wed, 02 Aug 2023 10:55:50 +0300
| Superseded in sid-release |
qemu (1:8.0.3+dfsg-4) unstable; urgency=medium
* more linux-user address fixes from Helge Deller
Remove
stable-staging/linux-user-fix-qemu-arm-to-run-static-armhf-binaries.patch
linux-user-limit-brk-adjustment-wrt-interp.brk-to-arm32.patch
Add
linux-user-show-heap-address-in-proc-pid-maps.patch
linux-user-optimize-memory-layout-for-static-and-dyn.patch
linux-user-load-pie-executables-at-upper-memory.patch
This *might* fix #1041859.
* stable-staging/tcg-ppc-fix-race-in-goto_tb-implementation.patch
fix qemu sigsegv on ppc -smp. Should fix autopkgtests (debvm, others)
* Stop passing --no-start to qga's dh_installsystemd.
qga is activated from an udev rule, but we need to restart it on upgrade.
Change by Sergio Durigan. Closes: LP#2028124.
-- Michael Tokarev <email address hidden> Wed, 26 Jul 2023 07:51:20 +0300
| Superseded in bookworm-release |
qemu (1:7.2+dfsg-7+deb12u1) bookworm; urgency=medium
* d/rules: add the forgotten --enable-libusb for the xen build.
This makes usb devices available for xen hvm domUs again,
as it has always been before. Closes: #1037341
* update to upstream 7.2.3 stable/bugfix release, v7.2.3.diff,
https://gitlab.com/qemu-project/qemu/-/commits/v7.2.3 :
- vnc: avoid underflow when accessing user-provided address
- target/i386: Change wrong XFRM value in SGX CPUID leaf
(was in debian already)
- acpi: pcihp: allow repeating hot-unplug requests
- qemu-options: finesse the recommendations around -blockdev
- docs/about/deprecated.rst: Add "since 7.1" tag to dtb-kaslr-seed
deprecation
- target/arm: Initialize debug capabilities only once
- hw/net/msf2-emac: Don't modify descriptor in-place in emac_store_desc()
- hw/arm/boot: Make write_bootloader() public as arm_write_bootloader()
- hw/arm/aspeed: Use arm_write_bootloader() to write the bootloader
- hw/arm/raspi: Use arm_write_bootloader() to write boot code
- hw/intc/allwinner-a10-pic: Don't use set_bit()/clear_bit()
- target/arm: Define and use new load_cpu_field_low32()
- hw/sd/allwinner-sdhost: Correctly byteswap descriptor fields
- hw/net/allwinner-sun8i-emac: Correctly byteswap descriptor fields
- softfloat: Fix the incorrect computation in float32_exp2
- meson: leave unnecessary modules out of the build
- block: Fix use after free in blockdev_mark_auto_del()
- target/riscv: Fix itrigger when icount is used
- accel/tcg: Fix atomic_mmu_lookup for reads
- ui: Fix pixel colour channel order for PNG screenshots
- async: Suppress GCC13 false positive in aio_bh_poll()
- tcg: ppc64: Fix mask generation for vextractdm
- hw/virtio/vhost-user: avoid using uninitialized errp
- virtio: fix reachable assertion due to stale value of cached region size
- block/monitor: Fix crash when executing HMP commit
- target/s390x: Fix EXECUTE of relative branches
- s390x/tcg: Fix LDER instruction format
- 9pfs/xen: Fix segfault on shutdown
- xen/pt: reserve PCI slot 2 for Intel igd-passthru
- Revert "vhost-user: Monitor slave channel in vhost_user_read()"
- Revert "vhost-user: Introduce nested event loop in vhost_user_read()"
- target/ppc: Fix helper_pminsn() prototype
- tests/docker: bump the xtensa base to debian:11-slim
- linux-user: Fix mips fp64 executables loading
- linux-user: fix getgroups/setgroups allocations
(was in debian already)
- migration: Handle block device inactivation failures better
- migration: Minor control flow simplification
- migration: Attempt disk reactivation in more failure scenarios
- target/arm: Fix vd == vm overlap in sve_ldff1_z
- scsi-generic: fix buffer overflow on block limits inquiry
- target/i386: fix operand size for VCOMI/VUCOMI instructions
- target/i386: fix avx2 instructions vzeroall and vpermdq
- vhost: fix possible wrap in SVQ descriptor ring
- virtio-net: not enable vq reset feature unconditionally
- virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_request
- e1000: Count CRC in Tx statistics
- e1000e: Fix tx/rx counters
- rtl8139: fix large_send_mss divide-by-zero
(was in debian already)
- util/vfio-helpers: Use g_file_read_link()
- usb/ohci: Set pad to 0 after frame update
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller
(Closes: #1029155, CVE-2023-0330)
- machine: do not crash if default RAM backend name has been stolen
- Update version for 7.2.3 release
* update to upstream 7.2.4 stable/bugfix release, v7.2.4.diff,
https://gitlab.com/qemu-project/qemu/-/commits/v7.2.4 :
- gitlab-ci: Avoid to re-run "configure" in the device-crash-test jobs
- scripts/device-crash-test: Add a parameter to run with TCG only
- hw/ppc/prep: Fix wiring of PIC -> CPU interrupt
- ui/gtk: fix passing y0_top parameter to scanout
- ui/gtk: use widget size for cursor motion event
- ui/gtk-egl: fix scaling for cursor position in scanout mode
- ui/sdl2: fix surface_gl_update_texture: Assertion 'gls' failed
- ui/sdl2: Grab Alt+Tab also in fullscreen mode
- ui/sdl2: Grab Alt+F4 also under Windows
- ui/sdl2: disable SDL_HINT_GRAB_KEYBOARD on Windows
- hw/dma/xilinx_axidma: Check DMASR.HALTED to prevent infinite loop.
- hw/arm/xlnx-zynqmp: fix unsigned error when checking the RPUs number
- target/arm: Explicitly select short-format FSR for M-profile
- target/s390x: Fix LCBB overwriting the top 32 bits
- tests/tcg/s390x: Test LCBB
- target/s390x: Fix LOCFHR taking the wrong half of R2
- tests/tcg/s390x: Test LOCFHR
- linux-user/s390x: Fix single-stepping SVC
- tests/tcg/s390x: Test single-stepping SVC
- s390x/tcg: Fix CPU address returned by STIDP
- docs: fix multi-process QEMU documentation
- qga: Fix suspend on Linux guests without systemd
- 9pfs: prevent opening special files (CVE-2023-2861)
- hw/remote: Fix vfu_cfg trace offset format
- vnc: move assert in vnc_worker_thread_loop
- target/ppc: Fix lqarx to set cpu_reserve
- target/ppc: Fix nested-hv HEAI delivery
- target/ppc: Fix PMU hflags calculation
- hw/riscv: qemu crash when NUMA nodes exceed available CPUs
- aspeed/hace: Initialize g_autofree pointer
- target/arm: Fix return value from LDSMIN/LDSMAX 8/16 bit atomics
- target/arm: Return correct result for LDG when ATA=0
- hw/intc/allwinner-a10-pic: Handle IRQ levels other than 0 or 1
- hw/timer/nrf51_timer: Don't lose time when timer is queried in tight loop
- host-utils: Avoid using __builtin_subcll on buggy versions of Apple Clang
- pc-bios/keymaps: Use the official xkb name for Arabic layout,
not the legacy synonym
- target/hppa: Fix OS reboot issues
- target/hppa: Provide qemu version via fw_cfg to firmware
- target/hppa: New SeaBIOS-hppa version 7
(minus the binary pc-bios/hppa-firmware.img changes)
- target/hppa: Update to SeaBIOS-hppa version 8
(minus the binary pc-bios/hppa-firmware.img changes)
- vhost: release memory_listener object in error path
- vdpa: fix not using CVQ buffer in case of error
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic
is present
- virtio-gpu: Make non-gl display updates work again when blob=true
- icount: don't adjust virtual time backwards after warp
- vdpa: mask _F_CTRL_GUEST_OFFLOADS for vhost vdpa devices
- target/ppc: Fix decrementer time underflow and infinite timer loop
- vfio/pci: Fix a segfault in vfio_realize
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path
- ui/gtk: set the area of the scanout texture correctly
- Update version for 7.2.4 release
* remove patches included in v7.2.4:
- linux-user-fix-getgroups-setgroups-allocations.patch
- rtl8139-fix-large_send_mss-divide-by-zero.patch
- target_i386-Change-wrong-XFRM-value.patch
-- Michael Tokarev <email address hidden> Tue, 11 Jul 2023 23:07:58 +0300
| Superseded in sid-release |
qemu (1:8.0.3+dfsg-3) unstable; urgency=medium
* d/control: glusterfs: drop pre-buster glusterfs-common alternative,
restrict glusterfs support to 64bit (see #1039604)
* linux-user-limit-brk-adjustment-wrt-interp.brk-to-arm32.patch
Fix (band-aid for now) an unexpected breakage caused by the previous
patch in this area which fixes static executables loading on armhf.
* d/binfmt-install: update mips* magic strings from upstream commit
77d119dd335f910c7:
mips: allow nonzero EI_ABIVERSION, distinguish o32 and n32
(Closes: #1041597)
-- Michael Tokarev <email address hidden> Sat, 22 Jul 2023 11:53:38 +0300
| Superseded in sid-release |
qemu (1:8.0.3+dfsg-2) unstable; urgency=medium * d/patches: set Forwarded: URLs for some patches * add 5 qemu-user fixes staging for the next stable: linux-user-make-sure-initial-brk-0-is-page-aligned.patch linux-user-fix-qemu-brk-to-not-zero-bytes-on-current-page.patch linux-user-prohibit-brk-to-to-shrink-below-initial-address.patch linux-user-fix-signed-math-overflow-in-brk-syscall.patch linux-user-fix-qemu-arm-to-run-static-armhf-binaries.patch (Closes: #1040981) -- Michael Tokarev <email address hidden> Thu, 20 Jul 2023 09:59:49 +0300
| Superseded in sid-release |
qemu (1:8.0.3+dfsg-1) unstable; urgency=medium
* new upstream stable/bugfix release 8.0.3
Including the following security fix(es):
- 9pfs: prevent opening special files (CVE-2023-2861)
* remove patches now included upstream:
- hw-mips-malta-fix-the-malta-machine-on-big-endian-hosts.patch
- qga-fix-suspend-on-linux-guests-without-systemd.patch
- hw_intc_allwinner-a10-pic-handle-IRQ-levels-other-than-0-or-1.patch
- linux-user-Avoid-mmap-of-the-last-byte-of-the-reserv.patch
* d/rules: omit qemu-systemd-data from dh_dwz run
* d/rules: create qemu-system-armhf & qemu-system-armel aliases
for qemu-system-arm (Closes: #1040209)
-- Michael Tokarev <email address hidden> Tue, 11 Jul 2023 15:07:04 +0300
| Superseded in sid-release |
qemu (1:8.0.2+dfsg-3) unstable; urgency=medium
* d/patches/*: update, add DEP-3 headers
* d/rules: strip ../../ prefix from compile paths
to undo sub-subdir build (-ffile-prefix-map)
* linux-user-Avoid-mmap-of-the-last-byte-of-the-reserv.patch:
(hackish) fix for recent memory failures
-- Michael Tokarev <email address hidden> Thu, 29 Jun 2023 18:36:33 +0300
| Superseded in sid-release |
qemu (1:8.0.2+dfsg-2) unstable; urgency=medium
* d/rules: --enable-libusb for xen build (Closes: #1037341)
* reapply linux-user-binfmt-P.diff.
Re-rely on qemu-user's argv0 to detect it is running in binfmt context.
The problem is that while we ship kernel which can pass this info the
qemu way, there are many containers which are running on older kernels
still, including bullseye kernel (5.10) which does not have this feature.
Keep it for a bit more.
* hw_intc_allwinner-a10-pic-handle-IRQ-levels-other-than-0-or-1.patch
Pick a patch from upstream mailinglist to fix regression in 8.0.2
-- Michael Tokarev <email address hidden> Thu, 15 Jun 2023 22:25:50 +0300
| Superseded in sid-release |
qemu (1:8.0.2+dfsg-1) unstable; urgency=medium
* new upstream stable/bugfix release
Closes: #1029155, CVE-2023-0330:
A DMA-MMIO reentrancy problem in lsi53c895a device
* keep full upstream version number, not just first 2 components
(Closes: #855966)
* d/copyright: remove stray newline
* d/control: drop libuuid-dev build-dep (not used)
* clarify files in d/not-installed just a little bit
* fixup qemu(1) refs in qemu-storage-daemon(1)
* move qemu-storage-daemon and qemu-block-drivers.7
from qemu-system-common to qemu-utils
* remove patches now included upstream:
- linux-user-fix-getgroups-setgroups-allocations.patch
- rtl8139-fix-large_send_mss-divide-by-zero.patch
- target_i386-Change-wrong-XFRM-value.patch
* qga-fix-suspend-on-linux-guests-without-systemd.patch
(hopefully Closes: #1004943)
* d/rules: disable pvrdma (Closes: #1034179, CVE-2023-1544)
CVE-2023-1544:
huge number of page tables for a ring of descriptors for CQ and
async events, potentially leading to an OOB read and crash
-- Michael Tokarev <email address hidden> Sun, 11 Jun 2023 11:49:17 +0300
qemu (1:7.2+dfsg-7) unstable; urgency=medium
* d/control: qemu-system-xen: add ipxe-qemu dependency (#1035676)
When installing qemu-system-xen on a new system, the boot roms are
not installed. Unfortunately this means HVM Xen DomUs can not be used
at all, because the boot roms are hard requiriment for qemu since 2014,
it fails to start without the boot roms even if (network) booting is
not requested.
Before bookworm, when qemu-system-xen was part of regular
qemu-system-x86 package, the dependency on ipxe-qemu was coming from
that package. But when splitting qemu-system-xen out of it, we forgot
that the boot roms are hard dependency now. This makes qemu-system-xen
unusable on a new install until ipxe-qemu is installed too.
An alternative would be to revert upstream commit 178e785fb
(from 2014) to make rom loading failure a non-fatal error.
-- Michael Tokarev <email address hidden> Sun, 14 May 2023 11:29:12 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-6) unstable; urgency=medium
[ Michael Tokarev ]
* sync with upstream v7.2.1 stable release, into d/patches/v7.2.1.diff.
All patches from 7.2.1 (besides stuff not relevant for linux, such
as mingw compilation fixes) has already been in d/patches/master/,
now they're in single upstream patch file
* v7.2.2.diff: upstream 7.2.2 stable/bugfix release
* hw-pvrdma-protect-against-guest-driver-CVE-2022-1050.patch:
remove, included in v7.2.2
* d/rules, d/qemu.desktop: provide an icon for gtk display (qemu.display)
* d/gbp.conf: set debian branch to debian-bookworm
* pick 3 more fixes from qemu-devel@:
rtl8139-fix-large_send_mss-divide-by-zero.patch
target_i386-Change-wrong-XFRM-value.patch
hw_mips_malta-Fix-malta-machine-on-big-endian-hosts.patch
* +linux-user-fix-getgroups-setgroups-allocations.patch (Closes: #811087)
[ Vagrant Cascadian ]
* debian/rules: Use 'printf' instead of 'echo' to avoid differences
in underlying /bin/sh implementations. Closes: #1034431
-- Michael Tokarev <email address hidden> Sat, 29 Apr 2023 13:02:55 +0300
| Deleted in experimental-release (Reason: None provided.) |
qemu (1:8.0+dfsg-4) experimental; urgency=medium
* d/control: do not use --enable-spice on sh4 and --enable-seccomp
on hppa where qemu-system is not being built
* spelling-information.patch: add headers
* merge d/qemu-system-x86.NEWS into d/qemu-system-common.NEWS
* d/rules: migrate docs for individual qemu-system-foo into symlinks
pointing to qemu-system-common docs
* d/rules: move qemu-user-binfmt doclink to the proper place,
and remove installdocs and installchangelogs overrides
* d/qemu-system-common.README.Debian, d/qemu-user*.README.Debian:
update statement about ppc64el in READMEs
* d/rules: switch to more declarative approach to generating various
qemu-system-foo packages, fix some bugs
* d/rules: switch to use "-" in variable names instead of "_"
to avoid exporting variables from environment
* add qemu-system-for-arch package (commented-out for now)
* refresh d/source/lintian-overrides
-- Michael Tokarev <email address hidden> Fri, 21 Apr 2023 19:11:53 +0300
| Superseded in experimental-release |
qemu (1:8.0+dfsg-3) experimental; urgency=medium
* Release highlights:
- build only tools on unsupported arches
- much easier arch control in a single place
- much easier dependency/options control
- stop building system targets on ia64 and kfreebsd
* d/control: generate Architecture: field dynamically from d/rules
* demote ia64 and kfreebsd from system arches to tools arches
* include m68k into list of utils arches
* optional dependencies and --enable-feature in d/control:
- update d/extract-config-opts to expect dpkg-like [arch] patterns
- d/control: unify and simplify arch strings for --enable-foo
and dependencies
- d/control: switch some build-deps to [:system-arch:]
* stop using --enable-tcg-interpreter for unsupported arches,
add --enable-tools for main qemu build
* provide --disable-xkbcommon to stop building qemu-keymap tool (!)
* d/rules: for !enable-system build, remove qemu.1 manpage
* install upstream qemu.desktop file instead of debian-specific
* d/*.install: list files relative to d/tmp/, use ${DEB_HOST_MULTIARCH}
* d/qemu-system-common.install: move 3 linux-specific files
from d/rules to here
* d/rules: move qemu-block-extrs maintscript/savedir generation
to instide enable-system
-- Michael Tokarev <email address hidden> Thu, 20 Apr 2023 20:50:35 +0300
| Superseded in experimental-release |
qemu (1:8.0+dfsg-2) experimental; urgency=medium
* re-add the dropped-on-the-way Provides: qemu-system-any
* specify versions for all Provides: so it's possible to add versioned deps
(including qemu-system-any and qemu-kvm)
* d/control: collapse Depends: qemu-system-* into tne new qemu-system-any
* drop Breaks:/Replaces: qemu-kvm (it was for old qemu-kvm binary pkg)
-- Michael Tokarev <email address hidden> Thu, 20 Apr 2023 13:09:57 +0300
| Superseded in experimental-release |
qemu (1:8.0+dfsg-1) experimental; urgency=medium
* New qemu release 8.0.0.
* remove binfmt-support registration, use systemd binfmd.d/ only
No more binfmt-support support. Unregister any entries on upgrades.
* binfmt: ship (but not enable) entries for all arches, do not omit native
Ship all really-foreign binfmt entries in /usr/lib/binfmt.d/ as usual,
to be enable automatically at package install. Also ship the
same-cpu-family entries in /usr/share/doc/qemu-user-static/qemu-foo.conf -
this way it will not be enabled automatically but it will be possible to
(carefully) symlink the needed additional entries to /etc/binfmt.d/.
(Closes: #924667, #1016810, #1027781)
* qemu-system-*: add extra names to use as qemu-system-${DEB_HOST_ARCH_CPU},
for both the Provides: line and executable file names. See
/usr/share/doc/qemu-system-common/README.Debian.
* qemu-system-*: also Provides: qemu-system-any
* qemu-system-ppc: provide qemu-kvm on ppc64el too, the same as ppc64
* qemu-user, qemu-user-static: provide qemu-${DEB_HOST_ARCH}[-static]
aliases too, when qemu arch is different from debian arch. See
/usr/share/doc/qemu-user[-static]/README.Debian.
* d/binfmt-install: fix disabled .conf entries install for qemu-user-binfmt
(those goes to qemu-user doc dir, not qemu-user-binfmt doc dir)
* d/control: remove old (pre-bullseye) Breaks/Replaces
* qemu-bridge-helper-path.patch: use the right path for qemu-bridge-helper
in docs (Closes: #1027447)
* d/qemu-system-common.NEWS: document dropping of virtiofsd
* d/rules: add comment saying why savemoddir block needs to be generated
* stop trying to provide os-specific qemu-ifup
* two more spelling fixes for mistyped "information"
-- Michael Tokarev <email address hidden> Thu, 20 Apr 2023 04:19:06 +0300
| Superseded in experimental-release |
qemu (1:8.0~rc4+dfsg-2) experimental; urgency=medium
[ Vagrant Cascadian ]
* debian/rules: Use 'printf' instead of 'echo' to avoid
differences in underlying /bin/sh implementations.
Closes: #1034431
[ Michael Tokarev ]
* Provide Debian architecture names for qemu-system-foo packages and
binaries, for arm64, armel, armhf, powerpc, amd64, loong64 and ppc64el.
It is now possible to run qemu-system-$debianarch binary or depend on
qemu-system-$debianarch package. This should simplify various tools
for cross compilation and the like. Also Closes: #825841.
* d/qemu-system-ppc.README.Debian: remove obsolete README about video.x
-- Michael Tokarev <email address hidden> Tue, 18 Apr 2023 05:04:04 +0300
| Superseded in experimental-release |
qemu (1:8.0~rc4+dfsg-1) experimental; urgency=medium
* update to 8.0.0-rc4
* d/rules, d/qemu.desktop: install a simple .desktop file in
qemu-system-data so that qemu-system-foo has an icon under gnome/wayland
* re-enable build on x32 - disable new CONFIG_XEN_EMU which is now enabled
unconditionally on x86
* d/patches: restore note-missing-module-pkg-name.diff
(lost in one of previous commits)
* pick 3 more fixes from qemu-devel@:
+rtl8139-fix-large_send_mss-divide-by-zero.patch
+target_i386-Change-wrong-XFRM-value.patch
+hw_mips_malta-Fix-malta-machine-on-big-endian-hosts.patch
-- Michael Tokarev <email address hidden> Fri, 14 Apr 2023 12:25:57 +0300
| Superseded in experimental-release |
qemu (1:8.0~rc3+dfsg-2) experimental; urgency=medium
* d/rules: fix qemu.svg install and remove .png fallback icons again
(qemu window still doesn't have an icon)
* d/binfmt-install: fix systemd binfmt registration broken
since previous upload
* +linux-user-fix-getgroups-setgroups-allocations.patch (Closes: #811087)
-- Michael Tokarev <email address hidden> Mon, 10 Apr 2023 12:33:01 +0300
| Superseded in experimental-release |
qemu (1:8.0~rc3+dfsg-1) experimental; urgency=medium
* new upstream release candidate (8.0.0-rc3)
* d/control: build-depend on gcc-powerpc-linux-gnu (for u-boot code)
* d/rules: build u-boot-sam460 ppc firmware (u-boot-sam460-20100605.bin)
* +u-boot-sam460ex-fdi.patch
* +u-boot-sam460ex-mstring.patch
* d/copyright: stop stripping roms/u-boot/, we need it for u-boot.e500
* d/rules: build u-boot.e500 binary (Closes: #756833)
* d/rules: install all png icons too (for gtk display)
* d/rules: remove old compat qboot symlink
* remove skip-meson-pc-bios.diff (and skip-unpack-edk2-blobs.patch),
fix pc-bios/meson.build instead
* remove d/get-orig-source.sh now when d/copyright is set up
* d/source/options: stop diff-ignoring submodules
-- Michael Tokarev <email address hidden> Thu, 06 Apr 2023 09:50:41 +0300
| Superseded in experimental-release |
qemu (1:8.0~rc2+dfsg-1) experimental; urgency=medium
[ Michael Tokarev ]
* new upstream 8.0 (rc2)
Packaging changes:
* d/rules, d/qemu-system-common.lintian-overrides:
do not try to install virtiofsd, it is removed in qemu 8.0
* d/rules: do not build sgabios, it is removed upstream in 8.0
* spelling.diff: remove hunks which has been applied,
adopt virtio.c=>virtio-hmp.c for remaining
* patches: remove all patches from d/patches/master/ (picked from upstream)
* hw-pvrdma-protect-against-guest-driver-CVE-2022-1050.patch:
remove, also applied upstream
* microvm-default-machine-type.patch: adjust for 8.0
* openbios-address-of-packet-member.patch: remove, not needed anymore
* d/control: build-depend on flex & bison
* d/rules: it is --disable-install-blobs, not --disable-blobs for xen too
* build microblaze firmware (petalogic-*.dtb) instead of using shipped one
* remove microblaze firmware (petalogic-*.dtb) for -dfsg
* remove previously deprecated qemu-debootstrap
* stop using custom $argv[0] for binfmt
* d/rules: always disable dwz if <<0.14
* stop enabling avx512f for xen build (it is disabled by default)
* d/rules: install .bmp icon, not .png
[ Christian Ehrhardt ]
* d/control-in: libsndio is in universe in ubuntu
* d/control-in: libnfs is in main since focal,
enable direct nfs storage support (LP: #1988704)
-- Michael Tokarev <email address hidden> Fri, 31 Mar 2023 15:44:21 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-5) unstable; urgency=medium
* d/qemu-guest-agent.udev: fix missing comma
(Christian Schneider <email address hidden>, Closes: #1031838)
* remove qemu-make-debian-root.
Ths script debian/qemu-make-debian-root has been broken for ages.
In 2023, it creates /etc/fstab with a reference to /dev/hda1, and
edits /etc/inittab which does not exist. And no one noticed, - so
it's safe to assume it is not used anymore. Just remove it.
* re-pick qemu-stable patches from master (the same patch contents):
master/tests-tcg-i386-Introduce-and-use-reg_t-consistently.patch
master/target-i386-Fix-BEXTR-instruction.patch
master/target-i386-Fix-C-flag-for-BLSI-BLSMSK-BLSR.patch
master/target-i386-fix-ADOX-followed-by-ADCX.patch
* 20 more changes picked from upstream/master:
master/target-i386-Fix-BZHI-instruction.patch
master/block-iscsi-fix-double-free-on-BUSY-or-similar-status.patch
master/hw-smbios-fix-field-corruption-in-type-4-table.patch
master/Revert-x86-do-not-re-randomize-RNG-seed-on-snapshot-.patch
master/Revert-x86-re-initialize-RNG-seed-when-selecting-ker.patch
master/Revert-x86-reinitialize-RNG-seed-on-system-reboot.patch
master/Revert-x86-use-typedef-for-SetupData-struct.patch
master/Revert-x86-return-modified-setup_data-only-if-read-a.patch
master/Revert-hw-i386-pass-RNG-seed-via-setup_data-entry.patch
master/vhost-user-gpio-Configure-vhost_dev-when-connecting.patch
master/vhost-user-i2c-Back-up-vqs-before-cleaning-up-vhost_.patch
master/vhost-user-rng-Back-up-vqs-before-cleaning-up-vhost_.patch
master/virtio-rng-pci-fix-migration-compat-for-vectors.patch
master/virtio-rng-pci-fix-transitional-migration-compat-for.patch
master/hw-timer-hpet-Fix-expiration-time-overflow.patch
master/vdpa-stop-all-svq-on-device-deletion.patch
master/vhost-avoid-a-potential-use-of-an-uninitialized-vari.patch
master/libvhost-user-check-for-NULL-when-allocating-a-virtq.patch
master/chardev-char-socket-set-s-listener-NULL-in-char_sock.patch
master/intel-iommu-fail-MAP-notifier-without-caching-mode.patch
master/intel-iommu-fail-DEVIOTLB_UNMAP-without-dt-mode.patch
-- Michael Tokarev <email address hidden> Sun, 05 Mar 2023 20:09:04 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-4) unstable; urgency=medium
* block-fix-detect-zeroes-with-BDRV_REQ_REGISTERED_BUF.patch:
re-pick now from master (the same patch, moved to master/).
* revert x86-don-t-let-decompressed-kernel-image-clobber-setu.patch
Closes: ##1031682 .
This turned out to be wrong move, breaking more stuff than fixing.
Upstream is going to revert it too.
-- Michael Tokarev <email address hidden> Mon, 20 Feb 2023 21:00:18 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-3) unstable; urgency=medium [ Paride Legovini ] * Disable LTO on non-amd64 builds (LP: #1921664) [ Michael Tokarev ] * target-arm-Fix-physical-address-resolution-for-Stage2.patch: re-fetch now from master branch * 4 more patches picked from master: x86-don-t-let-decompressed-kernel-image-clobber-setu.patch migration-ram-Fix-error-handling-in-ram_write_tracki.patch migration-ram-Fix-populate_read_range.patch qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch * 5 fixes picked from current pullreqs: block-fix-detect-zeroes-with-BDRV_REQ_REGISTERED_BUF.patch tests_tcg_i386-introduce-and-use-reg_t-consistently.patch target_i386-fix-BEXTR-instruction.patch target_i386-fix-C-flag-for-BLSI-BLSMSK-BLSR.patch target_i386-fix-ADOX-followed-by-ADCX.patch * disable dwz on certain architectures for older dwz (FTBFS on bullseye, #968670) -- Michael Tokarev <email address hidden> Fri, 10 Feb 2023 14:29:12 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-2) unstable; urgency=medium
* d/rules: add -ffile-prefix-map when building skiboot
* d/control: provide qemu-kvm in qemu-system-misc on s390x
(Closes: #1029309)
* d/control: drop dependency of qemu-guest-agent on lsb-base
* Picked patches from qemu master branch tagged for qemu-stable
up to commit deabea6e88 (2023-02-02):
target-sh4-Mask-restore-of-env-flags-from-tb-flags.patch
vhost-fix-vq-dirty-bitmap-syncing-when-vIOMMU-is-ena.patch
virtio-mem-Fix-the-bitmap-index-of-the-section-offse.patch
virtio-mem-Fix-the-iterator-variable-in-a-vmem-rdl_l.patch
target-arm-fix-handling-of-HLT-semihosting-in-system.patch
meson-accept-relative-symlinks-in-meson-introspect-i.patch
target-riscv-Set-pc_succ_insn-for-rvc-illegal-insn.patch
acpi-cpuhp-fix-guest-visible-maximum-access-size-to-.patch
hw-nvme-fix-missing-endian-conversions-for-doorbell-.patch
hw-nvme-fix-missing-cq-eventidx-update.patch
configure-fix-GLIB_VERSION-for-cross-compilation.patch
target-arm-Fix-sve_probe_page.patch
target-arm-allow-writes-to-SCR_EL3.HXEn-bit-when-FEA.patch
target-arm-Fix-in_debug-path-in-S1_ptw_translate.patch
* Also: target-arm-Fix-physical-address-resolution-for-Stage.patch
-- Michael Tokarev <email address hidden> Thu, 02 Feb 2023 21:17:10 +0300
| Superseded in sid-release |
qemu (1:7.2+dfsg-1) unstable; urgency=medium
* new upstream release
Closes: #1025123 CVE-2022-4172
(erst: undefined behavior in memcpy in write_erst_record)
Closes: #1021981 qemu-user: faccessat2 is not implemented
Closes: #1021019 CVE-2022-3165 (VNC: integer underflow in
vnc_client_cut_text_ext leads to CPU exhaustion)
* remove patches applied upstream
* refresh note-missing-module-pkg-name.diff
* slirp is always external package now, not a submodule anymore
* d/control: require meson >> 0.61.5~ for build
* spelling.diff: update with more spelling error
* add some lintian-overrides
* fix minor spelling errors in patches
* d/control: Bump Standards-Version to 4.6.1
* debian shell programs use "which" instead of the "command -v",
fix that (Closes: #1018254)
* Better fix for #1019011 (gcc ICE building palcode-clipper), use -O1
instead of -O2 for the failing compile when it actually fails
(no need to depend on gcc-11, Closes: #1011003)
-- Michael Tokarev <email address hidden> Thu, 15 Dec 2022 17:17:28 +0300
| Superseded in sid-release |
qemu (1:7.1+dfsg-2) unstable; urgency=medium
* tulip-restrict-DMA-engine-to-memories-CVE-2022-2962.patch
fix possible stack or heap overflow (tulip: DMA reentrancy issue)
Closes: #1018055, CVE-2022-2962
* hw-pvrdma-protect-against-guest-driver-CVE-2022-1050.patch
fix possible use-after-free in paravirtual RDMA device.
Closes: #1014589, CVE-2022-1050
* mention closing of #979677 (CVE-2020-14394) by 7.1
* d/rules: parametrify extra-cflags & extra-ldflags
* d/rules: explicitly disable pie on arm64 due to
https://sourceware.org/bugzilla/show_bug.cgi?id=29514
Fixes FTBFS.
-- Michael Tokarev <email address hidden> Tue, 13 Sep 2022 20:08:43 +0300
| Superseded in sid-release |
qemu (1:7.1+dfsg-1) unstable; urgency=medium
* new upstream release (7.1)
Closes: #1014958, CVE-2022-35414
Closes: #1014590, CVE-2022-0216
Closes: #988333
* d/copyright:
- remove mentions of slirp (packaged separately)
- blindly convert to dep-5 (it needs a complete rewrite)
- add Files-Excluded from d/get-orig-source.sh
* d/gbp.conf: remove filter= (and whole [import-orig])
* d/watch: verify upstream tarballs
* d/rules: stop faking skiboot version, it is now properly included in
roms/skiboot/.version file. Add a dependency on this file too
* d/patches:
- remove use-fixed-data-path.patch: not needed anymore
- linux-user-binfmt-P.diff: refresh
- remove patches applied upstream
* d/control:
- it is --enable-capstone now, not --enable-capstone=system
- it is --enable-png now, not --enable-vnc-png
* d/rules: fix --enable-vhost-* options
* d/rules: remove vnc-png for xen too
* openbios-array-bounds-gcc12.patch
* opensbi-fix-build-with-binutils-2.38.patch
* d/rules: adopt vof build changes
* d/qemu-system-data.docs: omit ccid.txt (removed)
* temporary workaround for gcc-12 bug #1019011: use gcc-11-alpha-linux-gnu
instead of gcc-alpha-linux-gnu (another option is to use -Os)
* d/control: temporarily build-depend on libva-dev till #1019485 is fixed
* add loongarch64 qemu-user and qemu-user arch
-- Michael Tokarev <email address hidden> Mon, 12 Sep 2022 11:50:53 +0300
| Superseded in bullseye-release |
qemu (1:5.2+dfsg-11+deb11u2) bullseye-security; urgency=medium
* virtio-net-fix-map-leaking-on-error-during-receive-CVE-2022-26353.patch
fix memory leak after fix for CVE-2021-3748
* vhost-vsock-detach-the-virqueue-element-on-error-CVE-2022-26354.patch
vhost-sock device was not detaching invalid element from
the virtqueue on error
* ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2021-4206.patch,
display-qxl-render-fix-race-condition-in-qxl_cursor-CVE-2021-4207.patch
two flaws can lead to allocation of small cursor object followed by a
subsequent heap-based buffer overflow with a potential for executing
arbitrary code within the context of QEMU process
* virtiofsd-drop-membership-of-all-supplementary-group-CVE-2022-0358.patch
potential group escalation allowed by virtiofsd
-- Michael Tokarev <email address hidden> Wed, 04 May 2022 22:50:01 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-7) unstable; urgency=medium
* d/tests/test-qemu-user: rework ls/glob test a bit
* d/tests/test-qemu-user: fix ppc64le qemu architecture name
* d/binfmt-install: use proper name for binfmt.d (*.conf)
Hopefully closes: #1011003
* two virtio-scsi bugfixes from upstream:
virtio-scsi-fix-ctrl-and-event-handler-functions-in-dataplane.patch
virtio-scsi-don-t-waste-CPU-polling-the-event-virtqueue.patch
* 3 patches from upstream to fix possible coroutine crashes:
coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch
coroutine-rename-qemu_coroutine_inc-dec_pool_size.patch
coroutine-revert-to-constant-batch-size.patch
* target-i386-do-not-consult-nonexistent-host-leaves.patch
* d/control: stop suggesting sudo for qemu-user-static
* Revert "d/rules: do not try to enable tcg-interpreter on unsupported
targets, it does not help anymore" - it does help but it needs a bit
more work
* disable xen support for qemu-system-x86 build and create a wrapper
for -i386 to redirect xen-related usage to xen-specific binary
with a warning (for bookworm only)
* common-user-no-user.patch: fix one of FTBFS on unsupported architectures
* d/rules: use regular variable assignment for BUILD_PACKAGES
* two trivial patches to fix spelling in roms:
openbios-spelling-endianess.patch
slof-spelling-seperator.patch
-- Michael Tokarev <email address hidden> Sun, 15 May 2022 15:49:12 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-6) unstable; urgency=medium
* d/rules: the forgotten --enable-xen-pci-passthrough for the xen build
* d/tests/test-qemu-user: rewrite to be more robust and complete and
include test for qemu-user-static too.
-- Michael Tokarev <email address hidden> Mon, 09 May 2022 01:37:56 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-5) unstable; urgency=medium * d/tests/test-qemu-user.sh: more arch-specific debugging/updates -- Michael Tokarev <email address hidden> Sat, 07 May 2022 12:22:26 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-4) unstable; urgency=medium
* d/tests/: fix failing tests.
- test-qemu-user: depend on gcc for dpkg-architecture to work,
and print debugging info for future switch to uname -m
- test-qemu-img: switch from using file to qemu-img info
-- Michael Tokarev <email address hidden> Sat, 07 May 2022 11:33:23 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-3) unstable; urgency=medium
[ Michael Tokarev ]
* d/binfmt-install: also generate binfmt.d/ entries for systemd
* d/control: use systemd as preferred alternative to binfmt-support
hopefully Closes: #789011 (Minimal dependencies to register binfmt)
Closes: #985889 (make binfmt setup configurable)
* d/control: remove Riku Voipio from Uploaders. Thank you Riku!
* d/rules: simplify DEB_BUILD_OPTIONS=parallel=N parsing
[ Guido Günther ]
* Add minimal autopkgtest (Closes: #832982)
-- Michael Tokarev <email address hidden> Sat, 07 May 2022 00:03:24 +0300
| Superseded in sid-release |
qemu (1:7.0+dfsg-2) unstable; urgency=medium
* d/control: add Rules-Requires-Root: no
* d/control: switch to debhelper-compat=13
* d/control: drop "qemu" empty/dummy pseudopackage
* d/control: do not build linux-user* on ia64 and powerpc
(not supported by upstream anymore)
* d/control: add Breaks for qemu-system-data for other packages from which
it borrowed files in the past (Closes: #1008095)
* d/rules: switch to the dh sequence (but keep build-{arch,indep}),
rearrange some rules.
This brings us dh_dwz (very slow) and dh_strip_nondeterminism.
* d/rules: do not explicitly turn off slirp & capstone (now properly
controlled by --with[out]-default-features option)
* d/rules: do not try to enable tcg-interpreter on the unsupported
targets, it does not help to build tools anymore
* d/rules: do not chown -w d/control, it breaks dpkg-source
* d/rules: clean up the clean target
* d/not-installed: list many documentation files and qemu-plugin.h
* configure-make-fortify_source-yes-by-default.patch: enable
fortify-source for minimal builds too
* d/changelog: mention #990562 (CVE-2021-3611) closed by 7.0
-- Michael Tokarev <email address hidden> Sat, 30 Apr 2022 13:38:12 +0300
| 1 → 75 of 316 results | First • Previous • Next • Last |
