-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 10 Sep 2025 09:50:46 +0300 Source: qemu Architecture: source Version: 1:10.0.6+ds-0+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1082377 1095935 1108387 1111809 Changes: qemu (1:10.0.6+ds-0+deb13u1) trixie; urgency=medium . * new upstream stable/bugfix release: - Update version for 10.0.6 release - linux-user/microblaze: Fix little-endianness binary - target/hppa: correct size bit parity for fmpyadd - target/i386: user: do not set up a valid LDT on reset - async: access bottom half flags with qatomic_read - target/i386: fix x86_64 pushw op - i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit - i386/cpu: Prevent delivering SIPI during SMM in TCG mode - i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS - target/i386: Fix CR2 handling for non-canonical addresses - block/curl.c: Use explicit long constants in curl_easy_setopt calls - pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs - target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN=32 and SEW=64 - target/riscv: Fix ssamoswap error handling - target/riscv: Fix SSP CSR error handling in VU/VS mode - target/riscv: Fix the mepc when sspopchk triggers the exception - target/arm: Don't set HCR.RW for AArch32 only CPUs - pcie_sriov: make pcie_sriov_pf_exit() safe on non-SR-IOV devices - docs/devel: Correct uefi-vars-x64 device name - hid: fix incorrect return value for hid - ui/gtk: Fix callback function signature - ui/gtk: Consider scaling when propagating ui info - Revert "i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check" - Revert "target/i386: do not expose ARCH_CAPABILITIES on AMD CPU" * new upstream stable/bugfix release: - Update version for 10.0.5 release - tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image - tests/functional/test_ppc_bamboo: Replace broken link with working assets - physmem: Destroy all CPU AddressSpaces on unrealize - memory: New AS helper to serialize destroy+free - include/system/memory.h: Clarify address_space_destroy() behaviour - migration: Fix state transition in postcopy_start() error handling - target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions - target/riscv: rvv: Replace checking V by checking Zve32x - target/riscv: Fix endianness swap on compressed instructions - hw/riscv/riscv-iommu: Fixup PDT Nested Walk - target/riscv: do not use translator_ldl in opcode_at - target/riscv: use riscv_csrr in riscv_csr_read - hw/char: sifive_uart: Raise IRQ according to the Tx/Rx watermark thresholds - docs/interop/firmware: Add riscv64 to FirmwareArchitecture - hw/riscv/riscv-iommu: Fix MSI table size limit - ui/icons/qemu.svg: Add metadata information (author, license) to the logo - ui/spice: Fix abort on macOS - ppc/spapr: init lrdr-capapcity phys with ram size if maxmem not provided - hw/intc/xics: Add missing call to register vmstate_icp_server - hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint Closes: #1082377 (CVE-2024-8354) - tests/tcg/multiarch: Add tb-link test - accel/tcg: Properly unlink a TB linked to itself - tests: Fix "make check-functional" for targets without thorough tests - .gitlab-ci.d/buildtest.yml: Unset CI_COMMIT_DESCRIPTION for htags - tcg/optimize: Fix folding of vector bitsel - hw/pci-host/astro: Don't call pci_regsiter_root_bus() in init - hw/pci-host/dino: Don't call pci_register_root_bus() in init - target/sparc: Relax decode of rs2_or_imm for v7 - target/sparc: Loosen decode of RDTBR for v7 - target/sparc: Loosen decode of RDWIM for v7 - target/sparc: Loosen decode of RDPSR for v7 - target/sparc: Loosen decode of RDY for v7 - target/sparc: Loosen decode of STBAR for v8 - target/sparc: Allow TRANS macro with no extra arguments - linux-user: avoid -Werror=int-in-bool-context - multiboot: Fix the split lock - target/i386: Define enum X86ASIdx for x86's address spaces - i386/cpu: Enable SMM cpu address space under KVM - hw/usb/network: Remove hardcoded 0x40 prefix in STRING_ETHADDR response - rust: hpet: fix new warning - ci: run RISC-V cross jobs by default - tests/docker/dockerfiles/python.docker: pull fedora:40 image instead of fedora:latest - .gitmodules: move u-boot mirrors to qemu-project-mirrors - iotests/check: always enable all python warnings - iotests/151: ensure subprocesses are cleaned up - iotests/147: ensure temporary sockets are closed before exiting - python: ensure QEMUQtestProtocol closes its socket - iotests: drop compat for old version context manager - python: backport 'avoid creating additional event loops per thread' - python: backport 'Remove deprecated get_event_loop calls' - python: backport 'qmp-tui: Do not crash if optional dependencies are not met' - python: backport 'qmp-shell-wrap: handle missing binary gracefully' - python: backport 'Use @asynciocontextmanager' - python: backport 'drop Python3.6 workarounds' - python: backport 'kick event queue on legacy event_pull()' - ui/vnc: Fix crash when specifying [vnc] without id in the config file - target/loongarch: Guard 64-bit-only insn translation with TRANS64 macro - target/loongarch: Add CRC feature flag and use it to gate CRC instructions * new upstream stable/bugfix release: - Update version for 10.0.4 release - block/curl: fix curl internal handles handling (Closes: #1111809) - hw/gpio/pca9554: Avoid leak in pca9554_set_pin() - hw/ppc: Fix build error with CONFIG_POWERNV disabled - target/mips: fix TLB huge page check to use 64-bit shift - linux-user/mips: Select M14Kc CPU to run microMIPS binaries - linux-user/mips: Select 74Kf CPU to run MIPS16e binaries - elf: Add EF_MIPS_ARCH_ASE definitions - e1000e: Prevent crash from legacy interrupt firing after MSI-X enable - Revert "tests/qtest: use qos_printf instead of g_test_message" - vfio scsi ui: Error-check qio_channel_socket_connect_sync() the same way - i386/kvm/vmsr_energy: Plug memory leak on failure to connect socket - qga: Fix truncated output handling in guest-exec status reporting - qga-vss: Write hex value of error in log - qga/installer: Remove QGA VSS if QGA installation failed - hw/arm/stm32f205_soc: Don't leak TYPE_OR_IRQ objects - qemu/atomic: Finish renaming atomic128-cas.h headers - scripts/kernel-doc: Avoid new Perl precedence warning - target/arm: Trap PMCR when MDCR_EL2.TPMCR is set - hw/intc/arm_gicv3_kvm: preserve pending interrupts during cpr - linux-user: Add strace for rseq - i386/tcg/svm: fix incorrect canonicalization - python: mkvenv: fix messages printed by mkvenv - hw/uefi: open json file in binary mode - hw/uefi: check access for first variable - hw/uefi: return success for notifications - hw/uefi: clear uefi-vars buffer in uefi_vars_write callback - mkvenv: Support pip 25.2 - hw/sd/ssi-sd: Return noise (dummy byte) when no card connected - qemu-iotests: Ignore indentation in Killed messages - rbd: Fix .bdrv_get_specific_info implementation - hw/nvme: cap MDTS value for internal limitation - hw/nvme: revert CMIC behavior - hw/nvme: fix namespace attachment - target/loongarch: Fix [X]VLDI raising exception incorrectly - ui/curses: Fix infinite loop on windows - ppc/xive2: Fix treatment of PIPR in CPPR update - ppc/xive2: Fix irq preempted by lower priority group irq - ppc/xive2: Reset Generation Flipped bit on END Cache Watch - ppc/xive: Fix PHYS NSR ring matching - ppc/xive2: fix context push calculation of IPB priority - ppc/xive2: Remote VSDs need to match on forwarding address - ppc/xive2: Fix calculation of END queue sizes - ppc/xive: Report access size in XIVE TM operation error logs - ppc/xive: Fix xive trace event output - target/i386/cpu: Move addressable ID encoding out of compat property in CPUID[0x1] - i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16] - i386/cpu: Fix number of addressable IDs field for CPUID.01H.EBX[23:16] - i386/cpu: Move adjustment of CPUID_EXT_PDCM before feature_dependencies[] check - Revert "i386/cpu: Fix cpu number overflow in CPUID.01H.EBX[23:16]" (The 5 changes above Closes: #1095935 in 10.0.x) - qga: correctly write to /sys/power/state on linux (Closes: #1108387) - scripts/make-release: Go back to cloning all the EDK2 submodules - target/arm: add support for 64-bit PMCCNTR in AArch32 mode - hw/ssi/aspeed_smc: Fix incorrect FMC_WDT2 register read on AST1030 - target/arm: Fix handling of setting SVE registers from gdb - target/arm: Fix big-endian handling of NEON gdb remote debugging - hw/intc/arm_gicv3_kvm: Write all 1's to clear enable/active - hw/i386/amd_iommu: Move IOAPIC memory region initialization to the end - intel_iommu: Allow both Status Write and Interrupt Flag in QI wait - pcie_sriov: Fix configuration and state synchronization - virtio-net: Fix VLAN filter table reset timing - vhost: Do not abort on log-stop error - vhost: Do not abort on log-start error - virtio: fix off-by-one and invalid access in virtqueue_ordered_fill - target/loongarch: Fix valid virtual address checking - target/riscv: Restrict midelegh access to S-mode harts - target/riscv: Restrict mideleg/medeleg/medelegh access to S-mode harts - intc/riscv_aplic: Fix target register read when source is inactive - target/riscv: Fix pmp range wraparound on zero - target/riscv: Fix exception type when VU accesses supervisor CSRs - target/riscv: do not call GETPC() in check_ret_from_m_mode() - linux-user/strace.list: add riscv_hwprobe entry - roms/Makefile: fix npcmNxx_bootrom build rules - system/physmem: fix use-after-free with dispatch - hw/net/cadence_gem: fix register mask initialization - target/mips: Only update MVPControl.EVP bit if executed by master VPE - docs/user: clarify user-mode expects the same OS - linux-user/aarch64: Support TPIDR2_MAGIC signal frame record - linux-user/aarch64: Clear TPIDR2_EL0 when delivering signals - target/i386: fix width of third operand of VINSERTx128 - hw/display/qxl-render.c: fix qxl_unpack_chunks() chunk size calculation - host-utils: Drop workaround for buggy Apple Clang __builtin_subcll() * drop patches included upstream: - hw-display-qxl-render.c-fix-qxl_unpack_chunks-chunk-.patch - pcie_sriov-Fix-configuration-and-state-synchronizati.patch - system-physmem-fix-use-after-free-with-dispatch.patch * d/control.mk: 10.0.6+ds Checksums-Sha1: eac625562234ef94bc8dc437d103b17154092579 12553 qemu_10.0.6+ds-0+deb13u1.dsc 970a775b6f3b35bb8e27c9845cc1f5ab1c42fc6c 39968296 qemu_10.0.6+ds.orig.tar.xz 646e61e1ab72850ea1d5e85556c28cca2f067170 140528 qemu_10.0.6+ds-0+deb13u1.debian.tar.xz 39b5e27b7342518612f75eb258d1d600d2e2ad7a 7785 qemu_10.0.6+ds-0+deb13u1_source.buildinfo Checksums-Sha256: 6e44fe26741aa464f64945d042b81d185c183cea0b8ce674aabb8b42cff776bf 12553 qemu_10.0.6+ds-0+deb13u1.dsc 15963c3b372dada08f5f9b4a8ca7de9c416101a78715d29fa4a687553570dda0 39968296 qemu_10.0.6+ds.orig.tar.xz 99672c0d444669809462a285160ff44878ea8dc4db55fac375f7b2284c94c0ed 140528 qemu_10.0.6+ds-0+deb13u1.debian.tar.xz 8f74123a52c260b1385b3c39bce2b6f47f5b7ed437b9a9dfac0650ee8fa90686 7785 qemu_10.0.6+ds-0+deb13u1_source.buildinfo Files: 2fb2dd8d37b15a1961d57c9a745bf85a 12553 otherosfs optional qemu_10.0.6+ds-0+deb13u1.dsc 821dc58b42e18cd3f5eb4ae06bb8fa5d 39968296 otherosfs optional qemu_10.0.6+ds.orig.tar.xz 11f1aeeea755225d5d9a3d53b7910761 140528 otherosfs optional qemu_10.0.6+ds-0+deb13u1.debian.tar.xz 1834ac2e308295926cd80a41ddecee02 7785 otherosfs optional qemu_10.0.6+ds-0+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJo9yuUCRCCqkokOx6UeEcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmcDaj0tA0oSe8xB6GxOVGheX2I+BmdI3IvxuNGIVNAl 9RYhBGSqKrUx1WkDNmv++YKqSiQ7HpR4AADDig//aSof+UZ9UF5fNVzeiF1sm74B g10y49K86RcHwisPp7X2rqSSkSmDcPWQDTMaa/fF8YVA1lMBzL8WBh80oXrFuELu RdAq8xo8Lwe7XABe5GO/q6mB3tzr7yuFrDPYm+xrVbiftYP1xHNdWH/uSeH5EPH6 MqVnmCbPxcOEzWnBD/E5M6Xx+SA3dwacF7lNYU+iuNy6MDaKSV7joxJA4G5WpQiW t3TPp3/Z68j2SvPLlOPF+IjlUfIowJBv2yu8QazXAaenAYTqk9DiItIr/5cbJWb4 mt1KbAGCi7mC5gapGAlAIx9a4vOpd8ejIbC26zVhCpYtWHTu6ByHA/FTvZG3pyaz rsR4fpOaQX/gIUgscRn2Jo6oqj7QO3BhDvgROBz1W3WT82SvbFTgK7cyBKs9Gt0R SBFCFqf/Hr4tvqKLk31tZ5vUAlBqnNeccwgzHXWaWnmQ1krpx4udmBrzkcd3ZCbF GQA/ex48v8cK5x7IRONjuwJwfXHF95L8wQxzOc4RgWb/VgTFFZmJG9y5z1ZroTye hCKaS0EVNasIKw1jZ7nIoxUtn1aCmdF0/D8epN2XaXzlfAB1fupnS1zbJ1HYRMcr vmlHcCSWu4T0vHDhF3gP5ozkzgq7dYM3kfawIhcmPdIS4ObzvlvLUU/ylc3ofvpj Z0v9c8yQIezl7Nbi1Co= =Wvz5 -----END PGP SIGNATURE-----