This package provides minimal x86 firmware for booting certain guests under
QEMU. qboot provides the minimum resources needed to boot PVH and bzImages.
bios-microvm, created from a minimal seabios configuration, provides slightly
wider support than qboot, but still focuses on quick boot up.
Provides
Requires
License
BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT
Changelog
* Thu Oct 01 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.1.2)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260929144512.126747-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/sh4: Replace TB_FLAG_GUSA_EXCLUSIVE with CF_STEP_ATOMIC
accel/tcg: Set CF_NOIRQ during cpu_exec_step_atomic
linux-user/sh4: align the vdso sigreturn trampolines
linux-user/sh4: fix vdso CFA for rt_sigreturn frames
linux-user/sh4: use the kernel's sigreturn trampoline sequence in the vdso
target/i386: Mark MOVNTI as not valid with prefixes 0x66, 0xF2, 0xF3
target/i386: Update FPU tag word for FXCH
target/i386: Update FPU tag word for FSTP
target/i386: Update FPU tag word for FXTRACT's old ST(0)
target/i386: Fix FXCH to unconditionally clear C1
target/ppc: Stop vCPU thread before calling parent_unrealize
tests/qtest/usb-hcd-xhci: test isoch endpoint type mismatch
tests/qtest/usb-hcd-xhci: test isoch pacing with MFINDEX above 2^32
hw/usb/hcd-xhci: don't assert on NAK when retrying an isoch transfer
hw/usb/hcd-xhci: fix interval alignment after MFINDEX passes 2^32
hw/usb/hcd-xhci: Set reentrancy guard in timer functions (CVE-2026-17588)
tcg/riscv64: Set vtype before whole-register vector loads
tests/tcg/s390x: Add regression test for #4449
tcg/optimize: Fix expansion/simplification of deposit
tests/tcg/arm: Add regression test for #4448
tcg/optimize: Fix fold_multiply2 vs 1
accel/tcg: Fix TLB_MMIO check in tlb_plugin_lookup()
accel/tcg: Use TLB_FORCE_SLOW not TLB_MMIO for system plugins
hw/9pfs: mutate FID path from main thread only (CVE-2026-93834)
s390x/pci: fix DMA slot leak on I/O TLB entry replacement
hw/s390x/ipl: Fix incorrect PCI IPL block lengths
linux-user/loongarch64: Detect vector stores in host_signal_write()
linux-user: implement mlock2(2) syscall
linux-user/riscv: honor zicntrúlse for base counterCSRs
system/ram-discard-manager: fix offset_within_address_space in replay_by_populated_state()
igvm: mark qigvm_find_param_entry as static
igvm: validate and honor byte_offset in parameter directives
hw/uefi: add missing uefi_str_is_valid check to uefi_vars_mm_lock_variable
target/loongarch: Fix data race in CSR_ESTAT
hw/riscv/virt.c: fix aclint soc/mtimer nodename
target/arm/hvf: implement MDCCSR_EL0 as RAZ
target/arm/whpx: fix whpx-arm post-reset CPU state
target/arm/whpx: incorrect ENCODE_AA64_CP_REG parameter order
target/arm/whpx: Don't try to sync ARM_CP_CONST registers
hw/intc/bcm2835_ic: reject out-of-range FIQ source values
qga: Change effective user/group ID in guest-ssh-* commands
vhost-user-gpu: validate command buffer size in submit_3d
ui/cursor: make the cursor refcount atomic
hw/display/qxl: hold ssd.lock while replacing ssd.cursor
hw/cxl: fix the CDAT DOE overlapping the Flex Bus DVSEC when sn= is set
virtio-scsi: set dataplane_started to false upon failure
virtio-balloon: fix free-page BH teardown on unrealize
hw/virtio: reject inverted virtio-iommu IOVA ranges
hw/net/virtio-net: strip trailing padding when caching RSC segment
hw/net/virtio-net: check packet size before VLAN tag access in receive_filter()
qapi/misc: Fix missed query-iothreads items
hw/cxl: Fix guest-triggerable QEMU exit on reserved interleave ways
virtio-gpu: clear res->blob on mapping cleanup
* Wed Sep 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Bugfixes and (spec-file) improvements:
* vapic: confine the VAPIC region to 0xc0000..0xe0000 (bsc#1282077, CVE-2026-81627)
* hw/9pfs: mutate FID path from main thread only (bsc#1282578, CVE-2026-93834)
* [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918)
* [openSUSE][RPM] spec: stub out all iotests when running under user emulation (e.g., for riscv64)
* target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864)
* target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864)
* linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864)
* file-posix: Tolerate unaligned hole at middle (bsc#1277435)
* [openSUSE][RPM] spec: skip the tests that require get_mempolicy under linux-user
* [openSUSE][RPM] build all firmware on riscv64 and fix user tests
* Fri Sep 04 2026 Dario Faggioli <dfaggioli@suse.com>
- Bugfixes (bsc#1277435, bsc#1263864):
* file-posix: Tolerate unaligned hole at middle (bsc#1277435)
* target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864)
* target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864)
* linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864)
* Thu Sep 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Improve riscv64 handling:
* [openSUSE][RPM] build all firmware on riscv64 and fix user tests
* [openSUSE][RPM] spec: stub out all iotests when running under user
emulation (e.g., for riscv64)
* Thu Sep 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix broken build on aarch64:
* [openSUSE][RPM] spec: disable GCS linker validation on aarch64
- Update to latest stable release (11.1.1)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260827155607.639070-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/riscv/tcg: sret in virtual user mode raises virtual instruction exception
target/riscv: Allow UXL to be 3 in mstatus on rv128
target/riscv: Restore register dump zero padding
tests/qtest: remove trace output from k230 watchdog test
target/riscv: enforce even register constraints for Zdinx fcvt pairs
target/riscv: reject FMV.X.W/FMV.W.X under Zfinx
target/riscv: honor zicbo* envcfg gating in linux-user mode
disas/riscv: Fix typo in th.lbib format
disas/riscv: Fix isa decoding of rev8
disas/riscv: Fix rv32 encoding of zext.h
target/riscv: allow menvcfg/henvcfg LPE and SSE bits on RV32
hw/riscv/riscv-iommu: preserve requested perm in spa_fetch()
hw/riscv/riscv-iommu: fix U-bit check to apply only to leaf S/VS-stage PTEs
disas/riscv: Decode unsigned vector immediates as unsigned
disas/riscv: Use signed type for vector immediates
disas/riscv: Fix 6-bit immediate extraction
disas/riscv: Fix th.srri decoding
tests/qtest: Add seed CSR zero extension test
target/riscv: Fix seed CSR sign extension
target/riscv: do not count ECALL in minstret
target/riscv: Fix memory leak in riscv_trigger_unrealize()
target/riscv: use SXL instead of MXL for read_sstatus
target/riscv: Fix PC sync in trans_sspopchk for CFI exception handling
whpx: i386: inject back db
whpx: i386: work around Hyper-V FP state oddities
whpx: i386: synchronise PAT too
whpx: i386: enable fast hypercall output
hw/i386: fw_cfg: do not set VMX feature control on WHPX
whpx: i386: fix xsaves enablement in legacy probing path
hw/watchdog: Add lower bound check for watchdogNumber
tests/tcg/aarch64: Add regression test for whilewr/whilerw
target/arm: Fix SVE2 WHILEWR/WHILERW zero diff boundary case
tcg: Export tcg_gen_ussub_i{32,64,tl}
hw/intc/arm_gicv3: Have GIC kconfig select GICv3 for HVF and WHPX
hw/intc: Fix arm kvm gicv3 selection
tcg: Defer tb_flush when initial thread region alloc fails
tcg: Return success from tcg_region_alloc
tcg: Return success from tcg_region_alloc__locked
target/loongarch: check FPE before reading fcc in bceqz/bcnez
meson: make linker warnings non-fatal on Linux
serial: clear transmit retry callback on unrealize
...
* Mon Aug 24 2026 Dario Faggioli <dfaggioli@suse.com>
- Revisit the fix for bsc#1232712:
* hw/display/xenfb: always register vfb and allocate console early (bsc#1232712)
- Switch to ipxe-qemu:
* [openSUSE][RPM] spec: stop building edk2-basetools and ipxe
- Upgrade to version 11.1.0
The full list of changes are available at:
https://wiki.qemu.org/ChangeLog/11.1
Highlights include:
* Universal Flash Storage (UFS) emulation support for Write Booster
(device-level caching) and Host-Initiated Defragmentation (HID) based
on UFS 4.1 specification
* vhost-host-user support for offloading real-time clock handling from
the hypervisor when using virtio-rtc
* GUI: improvements to virtual console handling/specifying of different
character encoding and GTK/VNC improvements as well
* ARM: support for new architectural CPU features (too many to list
here, see full changelog)
* ARM: support for new imx8mp-evk machine type (based on i.MX 8MM
Evaluation kit)
* ARM: 'virt' board support for specifying cache topology, 'hvf'
accelerator now supports nested virtualization and vGIC
* HPPA: updated to SeaBIOS-hppa v25 firmware, TLB insert fixes for
HP-UX 9
* PowerPC: MPIPL support for PowerNV to preserve memory after an
unexpected reset, as well as support for emulating a nest MMU
* RISC-V: ISA exstention support for big-endian, Zbr/xbr0p93, Zvfbfa,
fractional LMUL on vector SHA instructions, KVM support for Zicbop
and BFloat16 extensions, and more
* RISC-V: new board support for K230, support for Tenstorrent mvendorid,
and other misc. fixes/features
* s390x: KVM support for ASTFLE facility 2 (for nested)
* and lots more...
* Thu Jul 30 2026 Dario Faggioli <dfaggioli@suse.com>
- (Properly, this time for real) fix bsc#1268245:
* [openSUSE][RPM] spec: properly fix bsc#1268245 (this time for real!)
* Thu Jul 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.0.3)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260725052155.1228635-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/arm: do not clear halting reason in has_work helper
target/arm: teach arm_cpu_has_work about halting reasons
hw/audio/intel-hda: restrict all DMA engine paths to memories
hw/net/cadence: Return current Cadence GEM queue pointers
hw/misc/applesmc: Fix a typo setting MSSD key
replay: fix use of uninitialized pointer on error
hw/display/qxl: validate monitors_config heads[] in phys2virt
net: Correct padding check in qemu_receive_packet()
hw/net/xilinx_axienet: Fix PHY register 17 link status reporting
hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise()
hw/usb/hcd-xhci: Fix guest-triggerable assert() in xhci_find_stream()
usbredir: fix infinite loop and SIGFPE with zero max_packet_size
usbredir: fix use-after-free on buffered bulk packet overflow
tests/qtest: add xhci-pci unplug finalize regression test
hw/usb/hcd-xhci-pci: break host link cycle so device_finalize() runs on unplug
hw/usb/xhci: clamp interval exponent to avoid UB shift in xhci_init_epctx()
accel/tcg: move jit thread manipulation into do_tb_phys_invalidate
hw/display/virtio-gpu: Check pixman_image_create_bits() results
hw/display/virtio-gpu: handle migration iov allocation failure
hw/display/virtio-gpu: cap submit_3d command buffer allocation
ui/vnc: validate SetPixelFormat field ranges
ui/vnc: fix out-of-bounds write in lossy refresh dirty marking
ui/gtk: Narrow DMA-BUF critical section
ui/input-barrier: fix off-by-one in keycode bounds check
ui/vnc: validate color shifts in SetPixelFormat
ui/vnc: fix OOB write in vnc_refresh_lossy_rect
net: only advertise passt in netdev help when CONFIG_PASST
hw/usb/hcd-xhci: Turn guest-triggerable abort() into qemu_log_mask()
hw/usb/hcd-ohci: Make sure that ohci_service_ed_list() cannot loop forever
hw/display/virtio-gpu: fix dmabuf_fd leak on remap failure
hw/scsi/vmw_pvscsi: add a comment to explain the endianness
hw/scsi/vmw_pvscsi: translate data endianness
hw/sparc64/niagara: use int64_t for vdisk size to avoid truncation
hw/display/qxl: fix TOCTOU in cursor chunk data_size handling
hw/misc/ivshmem: clear chardev handlers before freeing peers
linux-user/alpha: populate AT_HWCAP from env->amask
linux-user/alpha: add coredump support
s390x/css: firm up handling of chained TIC CCWs
s390x/sclpcpi: check event length field before reading from buffer
s390x/sclp: prevent re-reading the sclp header
hw/misc/stm32_rcc: Correct offset-to-irq calculation
hw/display/sm501: Don't allow guest to set ram size larger than it is
hw/display/sm501: Avoid overflow problems in bounds check calculations
hw/display/sm501: Catch bad coordinates for RTL operations
...
- Fix bsc#1273022:
* hw/i386/pc: xen: reinstate the "xenfv" machine alias (bsc#1273022)
* Tue Jul 21 2026 Dario Faggioli <dfaggioli@suse.com>
- Properly fix bsc#1268245:
* [openSUSE][RPM] spec: fix missing unversioned ppc64 linker (bsc#1268245)
* Tue Jun 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.0.2)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260627082913.181C717AB6B@think4mjt.localdomain/
Bugs and CVEs fixed:
- bsc#1268794 (CVE-2026-48914)
A selection of them is reported here below:
linux-user: Fix AT_PHDR when program headers are relocated into their own segment
hw/pci: Replace assert with bounds check and return
ppc/pnv_phb3: Error out on invalid config access
linux-user/xtensa: fix unlock of uninitialized frame pointer on sigreturn
linux-user/xtensa: save/restore FP registers across signal delivery
target/xtensa: add cpu_set_fcr/fsr helpers to sync fp_status
target/arm/hvf: Stop pre-allocating cpreg_vmstate arrays
ui/sdl2: Set GL ES profile before creating initial GL context
ui/sdl2: Explicitly specify EGL platform
hw/9pfs: reject . and .. in Twstat rename
hw/9pfs: fix abort due to illegal name with Twstat rename
gdbstub: Update x86 control register bits
target/i386: apply mod to immediate count of an RCL/RCR operation
hw/uefi: fix parse_hexstr
target/riscv: mask vxrm csrw write to the low 2 bits
disas/riscv.c: fix inst_length()
target/riscv/tcg: disable svnapot if satp_mode < sv39
target/riscv/cpu_helper.c: add PMA access fault
target/riscv/cpu_helper.c: fault with reserved PTE.PBMT val
target/riscv/insn_trans/trans_rvzicbo.c.inc: save opcode before helpers
disas/riscv.c: add 'cbo' insns to disassembler
target/riscv/csr.c: fix mstatus.UXL reserved value
target/riscv/csr.c: do not allow mstatus MPV/GVA writes
target/riscv/tcg: disable svpbmt if satp_mode < sv39
target/riscv/cpu_helper.c: allow LOAD_ADDR_MIS promotion to AMO fault
virtio: Allow to fill a whole virtqueue in order
amd_iommu: Reject non-decreasing NextLevel in fetch_pte()
amd_iommu: Follow root pointer before page walk and use 1-based levels
libvduse: fix buffer overflow in vduse_queue_read_indirect_desc()
libvhost-user: fix buffer overflow in virtqueue_read_indirect_desc()
tests/qtest: Add amd-iommu command buffer head wrap test
amd_iommu: Update command buffer head ptr in MMIO region after wraparound
amd_iommu: restrict command buffer head/tail ranges to ring size
linux-user: add preadv2/preadv2
system/rtc: Fix a possible year-2038 integer overflow problem
linux-user/strace: add fsmount series of syscalls
linux-user: implement fsmount(2) series of syscalls
fpu: Handle all rounding modes in partsN_uncanon_normal
hw/usb/hcd-ohci: Clean up USBPacket before freeing ISO TD packet
qed: Don't try to flush during incoming migration
iotests: test shared mmap for fuse export
block/export/fuse: set FUSE_DIRECT_IO_ALLOW_MMAP flag to fix regression
block/export/fuse: use struct fuse_init_in
qcow2: Fix data loss on zero write with detect-zeroes=unmap
iotests/046: Test that discard/write_zeroes wait for dependencies
qcow2: Fix corruption on discard during write with COW
qemu-io: Add 'aio_discard' command
virtio-blk: add missing VIRTIO_BLK_T_SCSI_CMD size check (CVE-2026-48914)
block/io: fallback to bounce buffer if BLKZEROOUT is not supported because of alignment
hw/i3c: fix CMD/data FIFO depth reset values to match real silicon
s390x/pci: Fix interrupt forwarding disable for interpreted devices
target/s390x: Make container ids in SysIB_15x 1-based
lcitool: remove Cirrus CI support
gitlab: remove x64-freebsd-14-build Cirrus job
gitlab: add initial MacOS 15 on gitlab runner
ci: drop cirrus MacOS build
tests/unit: add test-envlist covering setenv/unsetenv name matching
util/envlist: fix prefix-match in envlist_unsetenv() name lookup
...
* Wed Jun 17 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix bsc#1268279, bsc#1268245, bsc#1263098:
* [openSUSE][RPM] spec: fix post-build-checks failure for qemu-tools (bsc#1263098)
* [openSUSE][RPM] spec: fix missing unversioned ppc64 cross-compiler binaries (bsc#1268245)
* ppc/spapr: Skip system reset for quiesced CPUs (bsc#1268279)
* Thu May 28 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.0.1)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260528061820.CEE521691A9@think4mjt.localdomain/
A selection of them is reported here below:
block/graph-lock: fix missed wakeup in bdrv_graph_co_rdunlock()
commit: Drain nodes across all of bdrv_commit()
block: Add more defaults to DEFAULT_BLOCK_CONF
block: Create DEFAULT_BLOCK_CONF macro
ide-test: Test reset during TRIM
ide-test: Factor out wait_dma_completion()
ide: Clean up ide_trim_co_entry() to be idiomatic coroutine code
ide: Minimal fix for deadlock between TRIM and drain
block: Add flags parameter to blk_*_pdiscard()
block: Add blk_co_start/end_request() and BDRV_REQ_NO_QUEUE
blkdebug: Add 'delay-ns' option
linux-user/sh4: Fix setup_sigtramp to match Linux kernel trampoline pattern
linux-user/sh4: Fix target_ucontext tuc_link field type
linux-user: Fix AT_EXECFN in AUXV for symlinked programs
hw/nvme: fix admin cq msix setup
target/arm/hvf: Fix WFI halting to stop idle vCPU spinning
tests/functional/qemu_test/asset.py: Don't use setxattr when it doesn't exist
hw/remote/machine.c: Mark x-remote machine as OK for AArch64 and AArch32
meson.build: Add -fzero-init-padding-bits=all
tests/qtest/iommu-smmuv3-test: Skip if no TCG GICv3 device present
ati-vga: fix ati_set_dirty address calculation
hw/i2c/microbit_i2c: Don't index off end of twi_read_sequence[]
aspeed/hace: Prevent total_req_len overflow
aspeed/hace: Fix out-of-bounds read in has_padding()
hw/misc/aspeed_sbc: Add bounds checking for OTP write operations
hw/display/cirrus_vga: Fix packed-24 color-expansion transparent copies
hw/display/cirrus_vga: Fix packed-24 color-expansion transparent pattern fills
hw/ufs: Zero reserved bytes in REPORT LUNS response header
hw/ufs: Keep MCQ SQs alive while requests are outstanding
hw/ufs: Reject zero-depth MCQ queues
hw/ufs: Guard MCQ CQ accesses against missing queues
hw/ufs: Validate MCQ SQ references before use
tests/functional: Make socat wait longer in migration exec test
hw/uefi: check auth.hdr_length minimum size
hw/uefi: avoid possibly unaligned variable_auth_2 struct field access
hw/uefi: verify data size before accessing it in wrap_pkcs7
hw/uefi: add name_size check to uefi_vars_mm_lock_variable()
hw/uefi: fix ucs2 string helper functions
hw/uefi: verify pio_xfer_offset before calculating buffer checksum
hw/uefi: fix buffer overruns
hw/misc/bcm2835_rng: Specify valid memory access sizes
...
- Fix bsc#1199023:
* [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023)
* Fri May 22 2026 Dario Faggioli <dfaggioli@suse.com>
- Package infra (service file):
* Move all the way back to tar_scm
* Thu May 21 2026 Dario Faggioli <dfaggioli@suse.com>
- spec file and infrastructure (services) changes:
* [openSUSE][RPM] spec: move away from update-alternatives (jsc#PED-15661)
* Switch back to tar.xz archive, as obscio is not ideal in git
* Sun Apr 26 2026 Dario Faggioli <dfaggioli@suse.com>
- Start hardening qemu-ga against arbitrary command execution:
* qemu-ga: start limiting the security sensitive capabilities of the guest-agent
* Fri Apr 24 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix missing dependencies in some SLE build:
* [openSUSE][RPM] spec: fix suse_version and is_opensuse macros handling (jsc#PED-15770)
* Fri Apr 24 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to version 11.0.0 (jsc#PED-14599)
The full list of changes are available at:
https://wiki.qemu.org/ChangeLog/11.0
Highlights include:
* New "nitro" accelerator to run AWS Nitro Enclaves natively, and improved
support for MSHV and WHPX accelerators.
* KVM: Support for CET virtualization.
* KVM: Reset support for SEV-SNP and TDX confidential VMs.
* virtio-gpu support for native context drivers and specifying a unique
resolution for each output.
* TCG: in-tree support for C++ plugins.
* NFS block driver support for libnfs v6 and various improvements to
curl/FUSE block drivers.
* ARM: support for CPU features FEAT_ASID2 and FEAT_E2H0.
* ARM: TCG emulation support for SME (Scalable Matrix Extension), and HVF
accelation of SME2 on macos (if the host CPU supports it).
* HPPA: SeaBIOS-hppa v24 now implements the Astro PCI initializaiton
(allowing for PCI VGA on 64-bit systems), improves upcoming HP-UX
64-bit support, and has initial support for multicell machines.
Prior versions also have fixes and updates for 64-bit/PAT support and
other areas as well.
* HPPA: Emulation support for 64-bit CPUs with 40 and 44 bit address
spaces, and 64-bit GDB support.
* LoongArch: KVM PMU migration support.
* LoongArch: TCG emulation support for LA v1.1, sc.q, llacq/screl/ and
estimated reciprocal instructions.
* PowerPC: snapshot support for several ppc devices.
* RISC-V: ISA extensions support for Zilsd, Zclsd, ZALASR, and Smpmpmt.
* RISV-V: CPU support for MIPS P8700 CPUs, better reporting of CSR
registers in 'info registers', and other fixes and improvements.
* s390: emulation support for "DIVIDE TO INTEGER" instruction.
* s390: support for booting from virtio-blk-pci devices.
* x86: CPU support for Diamond Rapids
* x86: support for a new "nitro" accelerator and machine type to run
Nitro Enclaves natively under QEMU.
* and lots more...
- Enable FUSE support
* [openSUSE][RPM] spec: enable fuse support
- Disable building on 32bit hosts
* [openSUSE][RPM] spec: disable build for 32bit hosts
* Sat Apr 11 2026 Dario Faggioli <dfaggioli@suse.com>
- Build QEMU with support for passt
* [openSUSE][RPM] spec: enable passt support
* Wed Mar 18 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (10.2.2)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260318045608.8332313DFF9@think4mjt.localdomain/
This release includes the fixes for (among others):
bsc#1258509 (CVE-2026-2243)
bsc#1259079 (CVE-2026-3196) / bsc#1259080 (CVE-2026-3195)
A selection of them is reported here below:
target/i386: add compat for migrating error code
hyperv/syndbg: check length returned by cpu_physical_memory_map()
fuse: Copy write buffer content before polling
target/loongarch: Preserve PTE permission bits in LDPTE
target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
hw: Make qdev_get_printable_name() consistently return freeable string
hw/net/npcm_gmac: Catch accesses off the end of the register array
linux-user: fix TIOCGSID ioctl
tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
bsd-user: Deal with mmap where start > reserved_va
linux-user: Deal with mmap where start > reserved_va
hw/net/xilinx_ethlite: Check for oversized TX packets
virtio-gpu: Ensure BHs are invoked only from main-loop thread
fdmon-io_uring: check CQ ring directly in gsource_check
aio-posix: notify main loop when SQEs are queued
block/nfs: Do not enter coroutine from CB
block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
block/throttle-groups: fix deadlock with iolimits and muliple iothreads
mirror: Fix missed dirty bitmap writes during startup
block/curl: fix concurrent completion handling
block/vmdk: fix OOB read in vmdk_read_extent()
hw/net/smc91c111: Don't allow negative-length packets
io: fix cleanup for websock I/O source data on cancellation
io: fix cleanup for TLS I/O source data on cancellation
io: separate freeing of tasks from marking them as complete
target/ppc/translate: Fix TCG debug assert translating CLRBWIBC
target/i386/emulate/x86_decode: Actually use stream in decode_instruction_stream()
target/i386/hvf/x86_mmu: Fix compiler warning
target/i386/emulate/x86_decode: Fix compiler warning
...
* Tue Feb 24 2026 Dario Faggioli <dfaggioli@suse.com