Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP3:Update
qemu.15026
qemu.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File qemu.changes of Package qemu.15026
------------------------------------------------------------------- Wed May 13 02:49:55 UTC 2020 - Bruce Rogers <brogers@suse.com> - Fix potential OOB access in iSCSI client code (CVE-2020-1711 bsc#1166240) 0345-iscsi-Cap-block-count-from-GET-LBA-.patch - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) 0346-lsi-use-enum-type-for-s-waiting.patch 0347-scsi-lsi-exit-infinite-loop-while-e.patch Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon May 11 23:47:17 UTC 2020 - Bruce Rogers <brogers@suse.com> - Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811) 0335-slrip-ip_reass-Fix-use-after-free.patch - Follow on patches for bsc#1123156. These patches are for fixing similar problems as for the original fix prompting this issue (CVE-2019-6778) 0336-slirp-fix-big-little-endian-convers.patch 0337-slirp-ensure-there-is-enough-space-.patch 0338-slirp-don-t-manipulate-so_rcv-in-tc.patch - Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 CVE-2020-7039 bsc#1161066) 0339-util-add-slirp_fmt-helpers.patch 0340-tcp_emu-Fix-oob-access.patch 0341-slirp-use-correct-size-while-emulat.patch 0342-slirp-use-correct-size-while-emulat.patch 0343-tcp_emu-fix-unsafe-snprintf-usages.patch - Fix use after free in slirp (CVE-2020-1983 bsc#1170940) 0344-Fix-use-afte-free-in-ip_reass-CVE-2.patch Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Sat Aug 3 21:46:47 UTC 2019 - Liang Yan <lyan@suse.com> - Security fix for heap overflow in ip_reass on big packet input (CVE-2019-14378, bsc#1143794) 0334-Fix-heap-overflow-in-ip_reass-on-bi.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Jul 25 18:17:27 UTC 2019 - Liang Yan <lyan@suse.com> - Security fix for null pointer dereference while releasing spice resources (CVE-2019-12155, bsc#1135902) 0332-qxl-check-release-info-object.patch - Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (CVE-2019-13164, bsc#1140402) 0333-qemu-bridge-helper-restrict-interfa.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Fri May 3 16:05:21 UTC 2019 - Bruce Rogers <brogers@suse.com> - Add x86 cpu feature "md-clear" (CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 bsc#1111331) 0331-target-i386-define-md-clear-bit.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Apr 3 02:33:43 UTC 2019 - lma@suse.com - Fix information leak in slirp (CVE-2019-9824 bsc#1129622) 0329-slirp-check-sscanf-result-when-emul.patch - Fix DOS possibility in device tree processing (CVE-2018-20815 bsc#1130675) 0330-device_tree.c-Don-t-use-load_image.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Fri Mar 29 02:13:09 UTC 2019 - Bruce Rogers <brogers@suse.com> - Add ability to set virtqueue size using virtqueue_size parameter. Using a smaller size allows for more disks (FATE#327255) 0328-virtio-scsi-Add-virtqueue_size-para.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Jan 30 22:06:27 UTC 2019 - Bruce Rogers <brogers@suse.com> - Address OOB and DoS security vulnerabilities in vga subsystem 0315-bitmap-add-bitmap_copy_and_clear_at.patch 0316-memory-add-support-getting-and-usin.patch 0317-vga-add-vga_scanline_invalidated-he.patch 0318-vga-make-display-updates-thread-saf.patch 0320-vga-use-DIV_ROUND_UP.patch (CVE-2017-13673) 0321-vga-fix-display-update-region-calcu.patch 0322-vga-drop-line_offset-variable.patch (CVE-2017-13672 - follow on fix) 0323-vga-handle-cirrus-vbe-mode-wraparou.patch 0324-vga-add-ram_addr_t-cast.patch 0325-vga-fix-region-checks-in-wraparound.patch (CVE-2018-7858 bsc#1084604) 0326-vga-fix-region-calculation.patch 0327-vga-catch-depth-0.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Jan 30 21:11:38 UTC 2019 - Bruce Rogers <brogers@suse.com> - Fix bad guest time after migration (bsc#1113231) 0308-kvmclock-update-system_time_msr-add.patch 0309-kvmclock-use-the-updated-system_tim.patch - Address various security/stability issues * Fix OOB access in slirp (CVE-2019-6778 bsc#1123156) 0310-slirp-check-data-length-while-emula.patch * Fix host security vulnerability related to handling symlinks in usb-mtp (CVE-2018-16872 bsc#1119493) 0311-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch * Fix DoS in virtfs (CVE-2018-19489 bsc#1117275) 0312-9p-fix-QEMU-crash-when-renaming-fil.patch * Fix OOB issue (use-after-free) if virtfs interface is deliberately abused (CVE-2018-19364 bsc#1116717) 0313-9p-write-lock-path-in-v9fs_co_open2.patch 0314-9p-take-write-lock-on-fid-path-upda.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Nov 5 21:27:26 UTC 2018 - Bruce Rogers <brogers@suse.com> - Address the following security vulnerability: * Avoid OOB access in restoring lsi53c895a emulated SCSI controller state (CVE-2018-18849 bsc#1114422) 0307-lsi53c895a-check-message-length-val.patch - Tweak spec file url's to match today's reality - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Oct 29 19:49:45 UTC 2018 - Larry Dewey <ldewey@suse.com> * Pulling upstream security fixes for NE2000, RTL8139, pcnet, and packet size changes (CVE-2018-10839 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 bsc#1110910 bsc#1111006 bsc#1111010 bsc#1111013) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0303-ne2000-fix-possible-out-of-bound-ac.patch 0304-rtl8139-fix-possible-out-of-bound-a.patch 0305-pcnet-fix-possible-buffer-overflow.patch 0306-net-ignore-packet-size-greater-than.patch ------------------------------------------------------------------- Fri Oct 5 16:56:37 UTC 2018 - Bruce Rogers <brogers@suse.com> - Change spec file http references to https ------------------------------------------------------------------- Thu Oct 4 21:13:31 UTC 2018 - Larry Dewey <ldewey@suse.com> - Adding patches to mitigate seccomp vulnerability (bsc#1106222 CVE-2018-15746) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0288-include-qemu-osdep.h-Add-macros-for.patch 0289-trace-move-qemu_trace_opts-to-trace.patch 0290-util-Add-UUID-API.patch 0291-seccomp-changing-from-whitelist-to-.patch 0292-seccomp-add-obsolete-argument-to-co.patch 0293-seccomp-add-elevateprivileges-argum.patch 0294-seccomp-add-spawn-argument-to-comma.patch 0295-seccomp-add-resourcecontrol-argumen.patch 0296-seccomp-allow-sched_setscheduler-wi.patch 0297-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch 0298-configure-require-libseccomp-2.2.0.patch 0299-seccomp-set-the-seccomp-filter-to-a.patch 0300-sandbox-disable-sandbox-if-CONFIG_S.patch 0301-seccomp-check-TSYNC-host-capability.patch 0302-Adding-uuid-header-file-to-files-us.patch ------------------------------------------------------------------- Wed Aug 8 16:21:24 UTC 2018 - brogers@suse.com - Update to upstream Spectre v4 vulnerability mitigation support, which includes exchanging our early patch with the upstream version (basically the same) and adding AMD related support. (CVE-2018-3639 bsc#1092885) * Patches renamed: 0281-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch -> 0281-i386-define-the-ssbd-CPUID-feature-.patch * Patches added: 0286-i386-Define-the-Virt-SSBD-MSR-and-h.patch 0287-i386-define-the-AMD-virt-ssbd-CPUID.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue Jul 31 06:17:44 UTC 2018 - fli@suse.com - Fix integer overflow while allocating a large memory chunk in qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735) 0285-qga-check-bytes-count-read-by-guest.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Fri Jun 22 09:15:18 UTC 2018 - fli@suse.com - Fix heap buffer overflow while reassembling fragmented datagrams in Slirp networking (CVE-2018-11806 bsc#1096223) 0284-slirp-correct-size-computation-whil.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Jun 7 14:57:31 UTC 2018 - brogers@suse.com - Tweak patch file generation to be more git version agnostic. Also change update_git.sh to not reformat spec file by default. ------------------------------------------------------------------- Mon May 14 21:32:55 UTC 2018 - brogers@suse.com - Spectre v4 vulnerability mitigation support for KVM guests. High level description of vulnerability: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This patch permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. As this change also relies on the same MSR infrastructure used for the "spec-ctrl" feature now is a good time to remove the temporary patch used to help ensure a smooth transition to spec-ctrl support regardless of KVM support. For this feature to be enabled, via adding it to the qemu commandline (eg: -cpu <model>,+spec-ctrl,+ssbd), so the guest OS can take advantage of the feature, spec-ctrl and ssbd support is also required in the host. (CVE-2018-3639 bsc#1092885) * Patches dropped: 0281-i386-Compensate-for-KVM-SPEC_CTRL-f.patch * Patches added: 0281-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue May 1 16:54:11 UTC 2018 - brogers@suse.com - Add support for block resize support for xen disks through the monitor. (fate#325467) 0283-xen-add-block-resize-support-for-xe.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Apr 4 16:03:48 UTC 2018 - lyan@suse.com - Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1079405) 0282-tpm-lookup-cancel-path-under-tpm-de.patch ------------------------------------------------------------------- Tue Mar 20 15:02:45 UTC 2018 - brogers@suse.com - the qemu-tools package also needs a prerequire of group management tools, from the shadow package. (bsc#1085598) ------------------------------------------------------------------- Fri Mar 9 14:02:34 UTC 2018 - brogers@suse.com - This update has the next round of Spectre v2 related patches, which now integrates with corresponding changes in libvirt. A January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by exposing the spec-ctrl feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We remove that initial patch and now rely on patches from upstream. This update defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. - A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ (CVE-2017-5715 bsc#1068032) - A patch is added to continue to detect Spectre v2 mitigation features (as shown by cpuid), and if found provide that feature to guests, even if running on older KVM (kernel) versions which do not yet expose that feature to QEMU. (bsc#1082276) These two patches will be removed when we can reasonably assume everyone is running with the appropriate updates. * Patches dropped: 0254-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch * Patches added: 0254-i386-Add-support-for-SPEC_CTRL-MSR.patch 0275-x86-cpu-increase-model_id-array-siz.patch 0276-x86-add-infrastructure-for-7_0_EDX-.patch 0277-i386-Add-spec-ctrl-CPUID-bit.patch 0278-i386-Add-FEAT_8000_0008_EBX-CPUID-f.patch 0279-i386-Add-new-IBRS-versions-of-Intel.patch 0280-migration-warn-about-inconsistent-s.patch 0281-i386-Compensate-for-KVM-SPEC_CTRL-f.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Mar 5 15:37:01 UTC 2018 - lyan@suse.com - Security fixes for the following CVE issues: (bsc#1071228 CVE-2017-17381) 0257-virtio-check-VirtQueue-Vring-object.patch (bsc#1068613 CVE-2017-16845) 0258-ps2-check-PS2Queue-pointers-in-post.patch (bsc#1070144 CVE-2017-15119) 0259-nbd-server-CVE-2017-15119-Reject-op.patch (bsc#1076775 CVE-2017-18043) 0260-osdep-Fix-ROUND_UP-64-bit-32-bit.patch (bsc#1076114 CVE-2018-5683) 0261-vga-check-the-validation-of-memory-.patch (bsc#1083291 CVE-2018-7550) 0262-multiboot-check-mh_load_end_addr-ad.patch (bsc#1073489 CVE-2017-15124) 0263-vnc-fix-debug-spelling.patch 0264-ui-remove-sync-parameter-from-vnc_u.patch 0265-ui-remove-unreachable-code-in-vnc_u.patch 0266-ui-remove-redundant-indentation-in-.patch 0267-ui-avoid-pointless-VNC-updates-if-f.patch 0268-ui-track-how-much-decoded-data-we-c.patch 0269-ui-introduce-enum-to-track-VNC-clie.patch 0270-ui-correctly-reset-framebuffer-upda.patch 0271-ui-refactor-code-for-determining-if.patch 0272-ui-fix-VNC-client-throttling-when-a.patch 0273-ui-fix-VNC-client-throttling-when-f.patch 0274-ui-place-a-hard-cap-on-VNC-server-o.patch - This patch is already included, add here for CVE track (bsc#1076179 CVE-2017-18030) 0146-cirrus-handle-negative-pitch-in-cir.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Feb 28 17:48:19 UTC 2018 - brogers@suse.com - Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've carried since the initial Spectre v2 patch was added. EDX bit 27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the guest is wrong in general, since the VM doesn't directly control the scheduling of physical hyperthreads. This is left strictly to the L0 hypervisor. ------------------------------------------------------------------- Fri Jan 19 16:54:17 UTC 2018 - lyan@suse.com - Spectre fixes for s390x by providing more hw features to guests (bsc#1076814) 0255-header-sync.patch 0256-s390x-kvm-Handle-bpb-feature.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Jan 11 20:58:08 UTC 2018 - brogers@suse.com - Pre-add group kvm for qemu-tools (bsc#1040202) ------------------------------------------------------------------- Thu Dec 21 21:09:22 UTC 2017 - brogers@suse.com - Pass through to guest info related to x86 security vulnerability (CVE-2017-5715 bsc#1068032) 0254-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Dec 4 23:10:32 UTC 2017 - brogers@suse.com - The fix for bsc#1048902 introduced a regression for Xen usage. (bsc#1048902) 0252-xen-mapcache-store-dma-information-.patch 0253-exec-Add-lock-parameter-to-qemu_ram.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Nov 13 21:45:28 UTC 2017 - brogers@suse.com - The fix for bsc#1043176 introduced a regression for scsi disk reads. (bsc#1067824) 0251-scsi-disk-fix-reads-from-scsi-disk-.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Oct 19 21:02:58 UTC 2017 - brogers@suse.com - Address various security/stability issues * Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942) 0248-io-monitor-encoutput-buffer-size-fr.patch * Fix OOB access in cirrus vga device emulation (CVE-2017-15289 bsc#1063122) 0249-cirrus-fix-oob-access-in-mode4and5-.patch * Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069) 0250-9pfs-use-g_malloc0-to-allocate-spac.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Oct 11 11:16:34 UTC 2017 - fli@suse.com - Address various security issues * Fix xen/blkif responses leak stack data (CVE-2017-10911 bsc#1057378) 0238-xen-disk-don-t-leak-stack-data-via-.patch * Fix crash when ide flushes empty CDROM drives (CVE-2017-12809 bsc#1054724) 0239-IDE-Do-not-flush-empty-CDROM-drives.patch * Fix DOS in qemu-nbd server (CVE-2017-9524 bsc#1043808) 0240-nbd-Fully-initialize-client-in-case.patch 0241-nbd-Fix-regression-on-resiliency-to.patch * Fix DOS vulnerability in qemu-nbd (CVE-2017-10664 bsc#1046636) 0242-qemu-nbd-Ignore-SIGPIPE.patch * Fix DOS from stack overflow in debug messages of usb redirection support (CVE-2017-10806 bsc#1047674) 0243-usb-redir-fix-stack-overflow-in-usb.patch * Fix OOB access while loading kernel via multiboot image (CVE-2017-14167 bsc#1057585) 0244-multiboot-validate-multiboot-header.patch * Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381) 0245-slirp-check-len-against-dhcp-option.patch * Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902) 0246-exec-use-qemu_ram_ptr_length-to-acc.patch * Fix OOB read access during vga display update (CVE-2017-13672 bsc#1056334) 0247-vga-stop-passing-pointers-to-vga_dr.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Sep 28 16:51:25 UTC 2017 - brogers@suse.com - Fix case of not being able to build from rpm sources due to undefined macro (boo#1057966) - Fix wrong permissions for kvm_stat.1 file ------------------------------------------------------------------- Wed Sep 27 10:36:31 UTC 2017 - fli@suse.com - Fix keys press not being recorded in openQA installation (bsc#1059369) * Patches added: 0235-input-Decrement-queue-count-on-kbd-.patch 0236-hid-Reset-kbd-modifiers-on-reset.patch 0237-vnc-Set-default-kbd-delay-to-10ms.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Aug 24 07:30:42 UTC 2017 - lma@suse.com - fix bsc#1043176: KVM lun resize not working as expected on Sles12sp2 HV. Fails multipath * Patches added: 0222-block-Allow-BDRV_REQ_FUA-through-bl.patch 0223-block-Switch-blk_read_unthrottled-t.patch 0224-block-Switch-blk_-write_zeroes-to-b.patch 0225-block-Introduce-byte-based-aio-read.patch 0226-ide-Switch-to-byte-based-aio-block-.patch 0227-dma-helpers-change-interface-to-byt.patch 0228-dma-helpers-change-BlockBackend-to-.patch 0229-scsi-disk-introduce-a-common-base-c.patch 0230-scsi-disk-introduce-dma_readv-and-d.patch 0231-scsi-disk-add-need_fua_emulation-to.patch 0232-scsi-disk-introduce-scsi_disk_req_c.patch 0233-scsi-block-always-use-SG_IO.patch 0234-scsi-block-fix-direction-of-BYTCHK-.patch ------------------------------------------------------------------- Wed Jun 21 14:10:36 UTC 2017 - lyan@suse.com - Fix rebooting VM results in no bootable device (bsc#997358) seabios-acpi_extract-Move-main-code-to-new-function-main.patch seabios-acpi_extract-Make-the-generated-.hex-files-more-huma.patch seabios-acpi_extract-Don-t-generate-unused-and-empty-q35-acp.patch seabios-acpi-Don-t-build-SSDT-files-on-every-build-store-the.patch seabios-acpi-acpi-Remove-build-check-for-iasl.patch - Remove build dependence iasl according above patches ------------------------------------------------------------------- Tue Jun 20 15:06:40 UTC 2017 - brogers@suse.com - Fix regression introduced by recent virtfs security fixes (bsc#1045035) 0221-9pfs-local-remove-use-correct-path-.patch - Add --no-renames to the git format-patch command in the git workflow script for better patch compatibility - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Sat Jun 10 21:36:09 UTC 2017 - brogers@suse.com - Address various security/stability issues * Fix DOS in USB XHCI emulation (CVE-2017-9375 bsc#1042800) 0208-xhci-guard-xhci_kick_epctx-against-.patch * Fix DOS in USB EHCI emulation (CVE-2017-9374 bsc#1043073) 0209-usb-ehci-fix-memory-leak-in-ehci.patch * Fix DOS in AHCI emulation (CVE-2017-9373 bsc#1042801) 0210-ide-core-add-cleanup-function.patch 0211-ide-ahci-call-cleanup-function-in-a.patch * Fix DOS in USB OHCI emulation (CVE-2017-9330 bsc#1042159) 0212-usb-ohci-fix-error-return-code-in-s.patch * Fix DOS potential in vnc interface (CVE-2017-8379 bsc#1037334) 0213-input-limit-kbd-queue-depth.patch * Fix DOS potential in vnc interface (CVE-2017-8309 bsc#1037242) 0214-audio-release-capture-buffers.patch * Fix OOB access in megasas device emulation (CVE-2017-8380 bsc#1037336) 0215-scsi-avoid-an-off-by-one-error-in-m.patch * Fix potential privilege escalation in virtfs (CVE-2017-7493 bsc#1039495) 0216-9pfs-local-forbid-client-access-to-.patch * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0217-9pfs-local-fix-unlink-of-alien-file.patch * Fix DOS in serial 16550A UART emulation (CVE-2017-5579 bsc#1021741) 0218-serial-fix-memory-leak-in-serial-ex.patch * Fix DOS in megasas device emulation (CVE-2017-9503 bsc#1043296) 0219-megasas-do-not-read-DCMD-opcode-mor.patch 0220-megasas-always-store-SCSIRequest-in.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon May 1 17:40:50 UTC 2017 - brogers@suse.com - Change patch for (bsc#1031142) * Patches dropped: 0154-i386-Allow-monitor-mwait-cpuid-over.patch * Patches added: 0154-i386-Allow-cpuid-bit-override.patch - Address various security/stability issues * Fix potential privilege escalation in virtfs (CVE-2016-9602 bsc#1020427) 0155-9pfs-fix-crash-when-fsdev-is-missin.patch 0156-9pfs-move-pdus-to-V9fsState.patch 0157-9pfs-fix-off-by-one-error-in-PDU-fr.patch 0158-9pfs-local-move-xattr-security-ops-.patch 0159-9pfs-remove-side-effects-in-local_i.patch 0160-9p-introduce-the-V9fsDir-type.patch 0161-9pfs-remove-side-effects-in-local_o.patch 0162-9pfs-introduce-relative_openat_nofo.patch 0163-9pfs-local-keep-a-file-descriptor-o.patch 0164-9pfs-local-open-opendir-don-t-follo.patch 0165-9pfs-local-lgetxattr-don-t-follow-s.patch 0166-9pfs-local-llistxattr-don-t-follow-.patch 0167-9pfs-local-lsetxattr-don-t-follow-s.patch 0168-9pfs-local-lremovexattr-don-t-follo.patch 0169-9pfs-local-unlinkat-don-t-follow-sy.patch 0170-9pfs-local-remove-don-t-follow-syml.patch 0171-9pfs-local-utimensat-don-t-follow-s.patch 0172-9pfs-local-statfs-don-t-follow-syml.patch 0173-9pfs-local-truncate-don-t-follow-sy.patch 0174-9pfs-local-readlink-don-t-follow-sy.patch 0175-9pfs-local-lstat-don-t-follow-symli.patch 0176-9pfs-local-renameat-don-t-follow-sy.patch 0177-9pfs-local-rename-use-renameat.patch 0178-9pfs-local-improve-error-handling-i.patch 0179-9pfs-local-link-don-t-follow-symlin.patch 0180-9pfs-local-chmod-don-t-follow-symli.patch 0181-9pfs-local-chown-don-t-follow-symli.patch 0182-9pfs-local-symlink-don-t-follow-sym.patch 0183-9pfs-local-mknod-don-t-follow-symli.patch 0184-9pfs-local-mkdir-don-t-follow-symli.patch 0185-9pfs-local-open2-don-t-follow-symli.patch 0186-9pfs-local-drop-unused-code.patch 0187-9pfs-fix-bogus-fd-check-in-local_re.patch 0188-9pfs-fix-fd-leak-in-local_opendir.patch 0189-9pfs-fail-local_statfs-earlier.patch 0190-9pfs-don-t-use-AT_EMPTY_PATH-in-loc.patch 0191-9pfs-fix-O_PATH-build-break-with-ol.patch 0192-9pfs-fix-vulnerability-in-openat_di.patch * Fix potential DOS in virtfs (no bug report) 0193-9pfs-don-t-try-to-flush-self-and-av.patch * Fix potential DOS in virtfs (CVE-2017-7377 bsc#1032075) 0194-9pfs-fix-file-descriptor-leak.patch * Fix potential DOS in virtfs (CVE-2017-8086 bsc#1035950) 0195-9pfs-xattr-fix-memory-leak-in-v9fs_.patch * Fix potential privilege escalation in virtfs (CVE-2017-7471 bsc#1034866) 0196-9pfs-introduce-v9fs_path_sprintf-he.patch 0197-9pfs-local-set-the-path-of-the-expo.patch * Fix potential DOS in usb xhci emulation (CVE-2017-5973 bsc#1025109) 0198-xhci-apply-limits-to-loops.patch * Fix DOS in SDHCI device emulation (CVE-2017-5987 bsc#1025311) 0199-sd-sdhci-check-transfer-mode-regist.patch * Fix DOS in USB OHCI emulation (CVE-2017-6505 bsc#1028184) 0200-usb-ohci-limit-the-number-of-link-e.patch * Fix OOB access in cirrus vga emulation (CVE-2016-9603 bsc#1028656) 0201-cirrus-vnc-zap-bitblit-support-from.patch * Fix privilege escalation in TCG mode of QEMU (bsc#1030624) 0202-tcg-i386-Check-the-size-of-instruct.patch * Fix OOB access in cirrus vga emulation (CVE-2017-7718 bsc#1034908) 0203-fix-cirrus_vga-fix-OOB-read-case-qe.patch * Fix OOB access in cirrus vga emulation (CVE-2017-7980 bsc#1035406) 0204-cirrus-stop-passing-around-dst-poin.patch 0205-cirrus-stop-passing-around-src-poin.patch 0206-cirrus-fix-off-by-one-in-cirrus_bit.patch * Fix OOB access in Vmware pv scsi emulation (CVE-2017-8112 bsc#1036211) 0207-vmw_pvscsi-check-message-ring-page-.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Mon Mar 27 15:11:14 UTC 2017 - agraf@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0154-i386-Allow-monitor-mwait-cpuid-over.patch (bsc#1031142) ------------------------------------------------------------------- Tue Feb 28 18:32:20 UTC 2017 - brogers@suse.com - Fix a few errors in the supported.*.txt files ------------------------------------------------------------------- Thu Feb 23 18:19:46 UTC 2017 - brogers@suse.com - Fix name of s390x specific sysctl configuration file to end with .conf (bsc#1026583) ------------------------------------------------------------------- Thu Feb 16 18:01:47 UTC 2017 - brogers@suse.com - Fix DOS in usb CCID card device emulator (CVE-2017-5898 bsc#1023907) 0152-usb-ccid-check-ccid-apdu-length.patch - Fix DOS in virtio-gpu-3d (CVE-2017-5857 bsc#1023073) 0153-virtio-gpu-fix-resource-leak-in-vir.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Feb 15 16:52:05 UTC 2017 - brogers@suse.com - slof fix desired for Leap 42_2: XHCI fixes (boo#977027) slof_xhci.patch ------------------------------------------------------------------- Tue Feb 14 23:56:23 UTC 2017 - brogers@suse.com - Follow upstream's replacement for patch we carry * Patches dropped (patch reverted upstream): 0147-cirrus-allow-zero-source-pitch-in-p.patch * Patches renamed: 0148-cirrus-fix-blit-address-mask-handli.patch -> 0147-cirrus-fix-blit-address-mask-handli.patch 0149-cirrus-fix-oob-access-issue-CVE-201.patch -> 0148-cirrus-fix-oob-access-issue-CVE-201.patch 0150-megasas-fix-guest-triggered-memory-.patch -> 0149-megasas-fix-guest-triggered-memory-.patch * Patches added: (replacement for dropped patch) 0150-cirrus-fix-patterncopy-checks.patch - Fix OOB access in cirrus vga emulation (CVE-2017-2620 bsc#1024972) 0151-cirrus-add-blit_is_unsafe-call-to-c.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Fri Feb 3 18:20:20 UTC 2017 - brogers@suse.com - Address various security/stability issues * Fix rare race during s390x guest reboot 0145-s390x-kvm-fix-small-race-reboot-vs..patch * Fix various inaccuracies in cirrus vga device emulation 0146-cirrus-handle-negative-pitch-in-cir.patch 0147-cirrus-allow-zero-source-pitch-in-p.patch 0148-cirrus-fix-blit-address-mask-handli.patch * Fix OOB access in cirrus vga emulation (CVE-2017-2615 bsc#1023004) 0149-cirrus-fix-oob-access-issue-CVE-201.patch * Fix DOS in megasas device emulation (CVE-2017-5856 bsc#1023053) 0150-megasas-fix-guest-triggered-memory-.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue Jan 31 16:08:52 UTC 2017 - brogers@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Fix cause of infrequent migration failures from bad virtio device state. (bsc#1020928) 0144-virtio-fix-vq-inuse-recalc-after-mi.patch ------------------------------------------------------------------- Mon Jan 30 17:54:40 UTC 2017 - brogers@suse.com - Address various security/stability issues * Fix DOS in cirrus vga interface (CVE-2016-9921 CVE-2016-9922 bsc#1014702 bsc#1015169) 0131-display-cirrus-check-vga-bits-per-p.patch * Fix graphical update errors introduced by previous security fix (bsc#1016779) 0132-display-cirrus-ignore-source-pitch-.patch * Fix OOB access in virtio-gpu (CVE-2016-10029 bsc#1017081 bsc#1016504) 0133-virtio-gpu-check-early-scanout-id.patch 0134-virtio-gpu-check-max_outputs-value.patch 0135-virtio-gpu-check-max_outputs-only.patch 0136-virtio-gpu-use-VIRTIO_GPU_MAX_SCANO.patch * Fix OOB access in virito-gpu-3d (CVE-2016-10028 bsc#1017084 bsc#1016503) 0137-display-virtio-gpu-3d-check-virgl-c.patch * Fix DOS in Intel 6300ESB device emulation (CVE-2016-10155 bsc#1021129) 0138-watchdog-6300esb-add-exit-function.patch * Fix DOS in virtio-gpu-3d (CVE-2017-5552 bsc#1021195) 0139-virtio-gpu-3d-fix-memory-leak-in-re.patch * Fix DOS in virtio-gpu (CVE-2017-5578 bsc#1021481) 0140-virtio-gpu-fix-memory-leak-in-resou.patch * Fix DOS in es1370 emulated audio device (CVE-2017-5526 bsc#1020589) 0141-audio-es1370-add-exit-function.patch * Fix DOS in ac97 emulated audio device (CVE-2017-5525 bsc#1020491) 0142-audio-ac97-add-exit-function.patch * Fix OOB access in SDHCI device emulation (CVE-2017-5667 bsc#1022541) 0143-sd-sdhci-check-data-length-during-d.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Jan 5 19:54:51 UTC 2017 - brogers@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 - The recent security fix for a DOS in the cirrus vga interface is causing a regression in that a SLES11 SP4 HVM guest gui (under Xen) is no longer updating correctly. Temporarily remove that fix until the right solution is found. (bsc#1016779) * Patches dropped (assumed temporary): 0131-display-cirrus-check-vga-bits-per-p.patch ------------------------------------------------------------------- Mon Dec 12 21:18:49 UTC 2016 - brogers@suse.com - Address various security/stability issues * Fix DOS in usb ehci emulation (CVE-2016-9911 bsc#1014111) 0128-usb-ehci-fix-memory-leak-in-ehci_in.patch * Fix DOS in usb redirection (CVE-2016-9907 bsc#1014109) 0129-usbredir-free-vm_change_state_handl.patch * Fix host information leak to guest in virtio-gpu (CVE-2016-9908 bsc#1014514) 0130-virtio-gpu-fix-information-leak-in-.patch * Fix DOS in cirrus vga interface (CVE-2016-9921 CVE-2016-9922 bsc#1014702 bsc#1015169) 0131-display-cirrus-check-vga-bits-per-p.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Dec 8 15:06:13 UTC 2016 - afaerber@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Fix uint64 property parsing and add regression tests (bsc#937125): 0123-string-input-visitor-Fix-uint64-par.patch 0124-test-string-input-visitor-Add-int-t.patch 0125-test-string-input-visitor-Add-uint6.patch 0126-tests-Add-QOM-property-unit-tests.patch 0127-tests-Add-scsi-disk-test.patch ------------------------------------------------------------------- Wed Dec 7 20:10:13 UTC 2016 - brogers@suse.com - Address various security/stability issues * Fix host information leak to the guest in 9pfs interface (CVE-2016-9103 bsc#1007454) 0113-9pfs-fix-information-leak-in-xattr-.patch * Fix DOS in 9pfs interface (CVE-2016-9102 bsc#1014256) 0114-9pfs-fix-memory-leak-in-v9fs_xattrc.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-9776 bsc#1013285) 0115-net-mcf-check-receive-buffer-size-r.patch * Fix DOS in virtio-gpu (CVE-2016-9846 bsc#1013764) 0116-virtio-gpu-fix-memory-leak-in-updat.patch * Fix host information leak to the guest in 9pfs interface (CVE-2016-9845 bsc#1013767) 0117-virtio-gpu-fix-information-leak-in-.patch * Fix DOS in 9pfs interface (CVE-2016-9913 bsc#1014110) 0118-9pfs-adjust-the-order-of-resource-c.patch 0119-9pfs-add-cleanup-operation-in-FileO.patch 0120-9pfs-add-cleanup-operation-for-hand.patch 0121-9pfs-add-cleanup-operation-for-prox.patch * Fix DOS in virtio-gpu (CVE-2016-9912 bsc#1014112) 0122-virtio-gpu-call-cleanup-mapping-fun.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue Dec 6 19:52:21 UTC 2016 - brogers@suse.com - Add in upstream commits targeted towards stable releases, plus other related patches found upon validating the appropriateness of these patches for our release. (bsc#1013341) 0094-macio-Use-blk_drain-instead-of-blk_.patch 0095-rbd-Switch-rbd_start_aio-to-byte-ba.patch 0096-virtio-blk-Release-s-rq-queue-at-sy.patch 0097-virtio-blk-Remove-stale-comment-abo.patch 0098-block-reintroduce-bdrv_flush_all.patch 0099-qemu-use-bdrv_flush_all-for-vm_stop.patch 0100-block-backend-remove-blk_flush_all.patch 0101-char-fix-missing-return-in-error-pa.patch 0102-rbd-shift-byte-count-as-a-64-bit-va.patch 0103-mirror-use-bdrv_drained_begin-bdrv_.patch 0104-block-curl-Use-BDRV_SECTOR_SIZE.patch 0105-block-curl-Fix-return-value-from-cu.patch 0106-block-curl-Remember-all-sockets.patch 0107-block-curl-Do-not-wait-for-data-bey.patch 0108-virtio-allow-per-device-class-legac.patch 0109-virtio-net-mark-VIRTIO_NET_F_GSO-as.patch 0110-vhost-adapt-vhost_verify_ring_mappi.patch 0111-ivshmem-Fix-64-bit-memory-bar-confi.patch 0112-intel_iommu-fix-incorrect-device-in.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Nov 30 18:03:29 UTC 2016 - brogers@suse.com - Fix potential privilege escalation in x86 Xen HVM ring interface (CVE-2016-9381 bsc#1009109) 0093-xen-fix-ioreq-handling.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed Nov 16 20:32:00 UTC 2016 - brogers@suse.com - Install man page for kvm_stat - Fix crash in vte (bsc#1008519) 0091-ui-gtk-Fix-a-runtime-warning-on-vte.patch 0092-gtk-don-t-leak-the-GtkBorder-with-V.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Nov 3 21:59:41 UTC 2016 - brogers@suse.com - Change kvm-supported.txt to be per-architecture documentation, stored in the package documentation directory of each per-arch package that has some support status (qemu-x86, qemu-s390, and qemu-arm). The kvm-supported.txt file is now a legacy name (it is stored with the legacy package after all), with then new name being supported.txt, moving away from the idea that the features identified therein are only kvm specific features. These 3 support.txt files still have basically the same content. The support information will be separated soon as the next step. (bsc#1005353) - Update support doc to include current ARM64 (AArch64) support stance. Make other improvments to the doc. (bsc#1005374) ------------------------------------------------------------------- Thu Nov 3 15:15:57 UTC 2016 - brogers@suse.com - Fix migration failure when snapshot also has been done (bsc#1008148) 0090-migration-fix-inability-to-save-VM-.patch - Change package post script udevadm trigger calls to be device specific (bsc#1002116) - Add qmp-commands.txt documentation file back in. It was inadvertently dropped some time ago ------------------------------------------------------------------- Tue Nov 1 21:57:49 UTC 2016 - brogers@suse.com - Add an x86 cpu option (l3-cache) to specify that an L3 cache is present and another option (cpuid-0xb) to enable the cpuid 0xb leaf, which deals with extended topology enumeration. Both these options are off by default so we don't change the guest abi. These can be used to improve performance. (bsc#1007769) 0088-target-i386-Implement-CPUID-0xB-Ext.patch 0089-target-i386-present-virtual-L3-cach.patch ------------------------------------------------------------------- Tue Nov 1 15:48:41 UTC 2016 - brogers@suse.com - Address various security/stability issues * Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161 bsc#1001151) 0067-hw-net-Fix-a-heap-overflow-in-xlnx..patch * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) 0068-vmsvga-correct-bitmap-and-pixmap-si.patch * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) 0069-usb-xhci-fix-memory-leak-in-usb_xhc.patch * Fix NULL pointer dereference in virtio processing (CVE-2016-7422 bsc#1000346) 0070-virtio-add-check-for-descriptor-s-m.patch * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) 0071-net-mcf-limit-buffer-descriptor-cou.patch * Fix DOS in USB EHCI emulation (CVE-2016-7995 bsc#1003612) 0072-usb-ehci-fix-memory-leak-in-ehci_pr.patch * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) 0073-xhci-limit-the-number-of-link-trbs-.patch * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) 0074-9pfs-allocate-space-for-guest-origi.patch * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) 0075-9pfs-fix-memory-leak-in-v9fs_link.patch * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) 0076-9pfs-fix-potential-host-memory-leak.patch * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) 0077-9pfs-fix-memory-leak-in-v9fs_write.patch * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) 0078-char-serial-check-divider-value-aga.patch * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) 0079-net-pcnet-check-rx-tx-descriptor-ri.patch * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) 0080-net-eepro100-fix-memory-leak-in-dev.patch * Fix OOB access in Rocker switch emulation (CVE-2016-8668 bsc#1004706) 0081-net-rocker-set-limit-to-DMA-buffer-.patch * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) 0082-net-rtl8139-limit-processing-of-rin.patch * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) 0083-audio-intel-hda-check-stream-entry-.patch * Fix DOS in virtio-gpu (CVE-2016-7994 bsc#1003613) 0084-virtio-gpu-fix-memory-leak-in-virti.patch * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) 0085-9pfs-fix-integer-overflow-issue-in-.patch * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) 0086-dma-rc4030-limit-interval-timer-rel.patch * Fix DOS in i.MX NIC emulation (CVE-2016-7907 bsc#1002549) 0087-net-imx-limit-buffer-descriptor-cou.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Fri Oct 28 15:34:13 UTC 2016 - brogers@suse.com - Update to v2.6.2 a stable, bug-fix-only release (fate#316228) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped (upstreamed): 0064-net-vmxnet-use-g_new-for-pkt-initia.patch 0065-9pfs-handle-walk-of-.-in-the-root-d.patch 0067-scsi-check-page-count-while-initial.patch 0069-scsi-mptconfig-fix-format-string.patch 0070-scsi-mptconfig-fix-an-assert-expres.patch * Patches renamed: 0066-net-vmxnet-initialise-local-tx-desc.patch -> 0064-net-vmxnet-initialise-local-tx-desc.patch 0068-scsi-pvscsi-avoid-infinite-loop-whi.patch -> 0065-scsi-pvscsi-avoid-infinite-loop-whi.patch 0071-ARM-KVM-Enable-in-kernel-timers-wit.patch -> 0066-ARM-KVM-Enable-in-kernel-timers-wit.patch ------------------------------------------------------------------- Fri Oct 28 14:38:41 UTC 2016 - brogers@suse.com - Enable smartcard support for Leap 42.2 (boo#1007263) ------------------------------------------------------------------- Mon Sep 19 08:20:15 UTC 2016 - agraf@suse.com - Allow kvm to run on the RPi3 (bsc#999212) 0071-ARM-KVM-Enable-in-kernel-timers-wit.patch ------------------------------------------------------------------- Thu Sep 8 18:55:01 UTC 2016 - brogers@suse.com - Address various security/stability issues * Fix potential DOS in virtio via infinite loop (CVE-2016-6490 bsc#991466) 0062-virtio-check-vring-descriptor-buffe.patch * Fix use-after-free issue in vmxnet3 (CVE-2016-6888 bsc#994771) 0063-net-vmxnet3-check-for-device_active.patch * Fix potential DOS in vmxnet (CVE-2016-6833 bsc#994774) 0064-net-vmxnet-use-g_new-for-pkt-initia.patch * Fix directory traversal flaw in 9p virtio backend (CVE-2016-7116 bsc#996441) 0065-9pfs-handle-walk-of-.-in-the-root-d.patch * Plug data leak in vmxnet3 emulation (CVE-2016-6836 bsc#994760) 0066-net-vmxnet-initialise-local-tx-desc.patch * Avoid OOB access or DOS in malicious use of Vmware pv scsi interface (CVE-2016-7155 bsc#997858) 0067-scsi-check-page-count-while-initial.patch * Avoid DOS potential in Vmware pv scsi interface (CVE-2016-7156 bsc#997859) 0068-scsi-pvscsi-avoid-infinite-loop-whi.patch * Fix OOB access in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0069-scsi-mptconfig-fix-format-string.patch * Fix incorrect assert in LSI SAS1068 emulation (CVE-2016-7157 bsc#997860) 0070-scsi-mptconfig-fix-an-assert-expres.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Thu Sep 1 16:19:04 UTC 2016 - ohering@suse.de - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 - Xen HVM: unplug also SCSI disks (bnc#953518) * Patches added: 0061-xen_platform-unplug-also-SCSI-disks.patch ------------------------------------------------------------------- Wed Aug 17 20:03:39 UTC 2016 - brogers@suse.com - Update to v2.6.1 a stable, bug-fix-only release (fate#316228) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped (upstreamed): 0045-net-mipsnet-check-packet-length-aga.patch 0046-i386-kvmvapic-initialise-imm32-vari.patch 0048-vga-add-sr_vbe-register-set.patch 0049-esp-check-command-buffer-length-bef.patch 0050-esp-check-dma-length-before-reading.patch 0051-scsi-pvscsi-check-command-descripto.patch 0052-scsi-mptsas-infinite-loop-while-fet.patch 0053-scsi-megasas-use-appropriate-proper.patch 0054-scsi-megasas-check-read_queue_head-.patch 0055-scsi-megasas-null-terminate-bios-ve.patch 0056-vmsvga-move-fifo-sanity-checks-to-v.patch 0057-vmsvga-don-t-process-more-than-1024.patch 0058-block-iscsi-avoid-potential-overflo.patch 0059-scsi-esp-check-TI-buffer-index-befo.patch 0065-scsi-megasas-initialise-local-confi.patch 0067-scsi-esp-check-buffer-length-before.patch 0068-scsi-esp-respect-FIFO-invariant-aft.patch 0069-pci-assign-Move-Invalid-ROM-error-m.patch 0072-Xen-PCI-passthrough-fix-passthrough.patch 0073-scsi-esp-make-cmdbuf-big-enough-for.patch 0076-virtio-error-out-if-guest-exceeds-v.patch * Patches renamed: 0047-fix-xen-hvm-direct-kernel-boot.patch -> 0045-fix-xen-hvm-direct-kernel-boot.patch 0060-xen-introduce-dummy-system-device.patch -> 0046-xen-introduce-dummy-system-device.patch 0061-xen-write-information-about-support.patch -> 0047-xen-write-information-about-support.patch 0062-xen-add-pvUSB-backend.patch -> 0048-xen-add-pvUSB-backend.patch 0063-xen-move-xen_sysdev-to-xen_backend..patch -> 0049-xen-move-xen_sysdev-to-xen_backend..patch 0064-vnc-add-configurable-keyboard-delay.patch -> 0050-vnc-add-configurable-keyboard-delay.patch 0066-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0051-xen-SUSE-xenlinux-unplug-for-emulat.patch 0070-configure-add-echo_version-helper.patch -> 0052-configure-add-echo_version-helper.patch 0071-configure-support-vte-2.91.patch -> 0053-configure-support-vte-2.91.patch 0074-scsi-esp-fix-migration.patch -> 0054-scsi-esp-fix-migration.patch 0075-hw-arm-virt-mark-the-PCIe-host-cont.patch -> 0055-hw-arm-virt-mark-the-PCIe-host-cont.patch 0077-xen-when-removing-a-backend-don-t-r.patch -> 0056-xen-when-removing-a-backend-don-t-r.patch 0078-xen-drain-submit-queue-in-xen-usb-b.patch -> 0057-xen-drain-submit-queue-in-xen-usb-b.patch 0079-qcow2-avoid-extra-flushes-in-qcow2.patch -> 0058-qcow2-avoid-extra-flushes-in-qcow2.patch 0080-qemu-bridge-helper-reduce-security-.patch -> 0059-qemu-bridge-helper-reduce-security-.patch 0081-xen-use-a-common-function-for-pv-an.patch -> 0060-xen-use-a-common-function-for-pv-an.patch ------------------------------------------------------------------- Wed Aug 3 17:05:37 UTC 2016 - brogers@suse.com - use upstream solution for building xen-usb.c correctly - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped: 0063-usb-Fix-conditions-that-xen-usb.c-i.patch * Patches added: 0063-xen-move-xen_sysdev-to-xen_backend..patch ------------------------------------------------------------------- Wed Aug 3 12:59:11 UTC 2016 - brogers@suse.com - Fix pvusb not working for HVM guests (bsc#991785) * Patches added: 0081-xen-use-a-common-function-for-pv-an.patch ------------------------------------------------------------------- Tue Aug 2 17:40:03 UTC 2016 - brogers@suse.com - Finally get qemu-bridge-helper the permissions it needs for non- root usage. The kvm group is leveraged to control access. (boo#988279) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0080-qemu-bridge-helper-reduce-security-.patch ------------------------------------------------------------------- Fri Jul 29 16:03:01 UTC 2016 - brogers@suse.com - Avoid unneeded flushes in qcow2 which impact performance (bsc#991296) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0079-qcow2-avoid-extra-flushes-in-qcow2.patch ------------------------------------------------------------------- Fri Jul 29 15:18:00 UTC 2016 - brogers@suse.com - Fix potential crashes in qemu from pvusb bugs (bsc#986156) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0077-xen-when-removing-a-backend-don-t-r.patch 0078-xen-drain-submit-queue-in-xen-usb-b.patch ------------------------------------------------------------------- Thu Jul 28 16:54:53 UTC 2016 - brogers@suse.com - Avoid potential for guest initiated OOM condition in qemu through virtio interface (CVE-2016-5403 bsc#991080) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0076-virtio-error-out-if-guest-exceeds-v.patch ------------------------------------------------------------------- Thu Jul 28 10:47:47 UTC 2016 - agraf@suse.com - Fix ARM PCIe DMA coherency bug (bsc#991034) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0075-hw-arm-virt-mark-the-PCIe-host-cont.patch ------------------------------------------------------------------- Wed Jul 27 15:59:17 UTC 2016 - brogers@suse.com - Fix failure in Xen HVM PCI passthrough (bsc#981925, bsc#989250) 0072-Xen-PCI-passthrough-fix-passthrough.patch - Fix OOB access in 53C9X emulation (CVE-2016-6351 bsc#990835) 0073-scsi-esp-make-cmdbuf-big-enough-for.patch 0074-scsi-esp-fix-migration.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue Jul 26 15:09:04 UTC 2016 - brogers@suse.com - Minor spec file tweaks - Modify the chroot guard in qemu:post to be more careful (boo#860275) - Remove deprecated patch "work-around-SA_RESTART-race" (boo#982208) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped: 0002-XXX-work-around-SA_RESTART-race-wit.patch * Patches renamed: 0003-qemu-0.9.0.cvs-binfmt.patch -> 0002-qemu-0.9.0.cvs-binfmt.patch 0004-qemu-cvs-alsa_bitfield.patch -> 0003-qemu-cvs-alsa_bitfield.patch 0005-qemu-cvs-alsa_ioctl.patch -> 0004-qemu-cvs-alsa_ioctl.patch 0006-qemu-cvs-alsa_mmap.patch -> 0005-qemu-cvs-alsa_mmap.patch 0007-qemu-cvs-gettimeofday.patch -> 0006-qemu-cvs-gettimeofday.patch 0008-qemu-cvs-ioctl_debug.patch -> 0007-qemu-cvs-ioctl_debug.patch 0009-qemu-cvs-ioctl_nodirection.patch -> 0008-qemu-cvs-ioctl_nodirection.patch 0010-block-vmdk-Support-creation-of-SCSI.patch -> 0009-block-vmdk-Support-creation-of-SCSI.patch 0011-linux-user-add-binfmt-wrapper-for-a.patch -> 0010-linux-user-add-binfmt-wrapper-for-a.patch 0012-PPC-KVM-Disable-mmu-notifier-check.patch -> 0011-PPC-KVM-Disable-mmu-notifier-check.patch 0013-linux-user-fix-segfault-deadlock.patch -> 0012-linux-user-fix-segfault-deadlock.patch 0014-linux-user-binfmt-support-host-bina.patch -> 0013-linux-user-binfmt-support-host-bina.patch 0015-linux-user-Ignore-broken-loop-ioctl.patch -> 0014-linux-user-Ignore-broken-loop-ioctl.patch 0016-linux-user-lock-tcg.patch -> 0015-linux-user-lock-tcg.patch 0017-linux-user-Run-multi-threaded-code-.patch -> 0016-linux-user-Run-multi-threaded-code-.patch 0018-linux-user-lock-tb-flushing-too.patch -> 0017-linux-user-lock-tb-flushing-too.patch 0019-linux-user-Fake-proc-cpuinfo.patch -> 0018-linux-user-Fake-proc-cpuinfo.patch 0020-linux-user-implement-FS_IOC_GETFLAG.patch -> 0019-linux-user-implement-FS_IOC_GETFLAG.patch 0021-linux-user-implement-FS_IOC_SETFLAG.patch -> 0020-linux-user-implement-FS_IOC_SETFLAG.patch 0022-linux-user-XXX-disable-fiemap.patch -> 0021-linux-user-XXX-disable-fiemap.patch 0023-slirp-nooutgoing.patch -> 0022-slirp-nooutgoing.patch 0024-vnc-password-file-and-incoming-conn.patch -> 0023-vnc-password-file-and-incoming-conn.patch 0025-linux-user-add-more-blk-ioctls.patch -> 0024-linux-user-add-more-blk-ioctls.patch 0026-linux-user-use-target_ulong.patch -> 0025-linux-user-use-target_ulong.patch 0027-block-Add-support-for-DictZip-enabl.patch -> 0026-block-Add-support-for-DictZip-enabl.patch 0028-block-Add-tar-container-format.patch -> 0027-block-Add-tar-container-format.patch 0029-Legacy-Patch-kvm-qemu-preXX-dictzip.patch -> 0028-Legacy-Patch-kvm-qemu-preXX-dictzip.patch 0030-console-add-question-mark-escape-op.patch -> 0029-console-add-question-mark-escape-op.patch 0031-Make-char-muxer-more-robust-wrt-sma.patch -> 0030-Make-char-muxer-more-robust-wrt-sma.patch 0032-linux-user-lseek-explicitly-cast-no.patch -> 0031-linux-user-lseek-explicitly-cast-no.patch 0033-virtfs-proxy-helper-Provide-__u64-f.patch -> 0032-virtfs-proxy-helper-Provide-__u64-f.patch 0034-configure-Enable-PIE-for-ppc-and-pp.patch -> 0033-configure-Enable-PIE-for-ppc-and-pp.patch 0035-Raise-soft-address-space-limit-to-h.patch -> 0034-Raise-soft-address-space-limit-to-h.patch 0036-increase-x86_64-physical-bits-to-42.patch -> 0035-increase-x86_64-physical-bits-to-42.patch 0037-vnc-provide-fake-color-map.patch -> 0036-vnc-provide-fake-color-map.patch 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0037-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0039-i8254-Fix-migration-from-SLE11-SP2.patch -> 0038-i8254-Fix-migration-from-SLE11-SP2.patch 0040-acpi_piix4-Fix-migration-from-SLE11.patch -> 0039-acpi_piix4-Fix-migration-from-SLE11.patch 0041-qtest-Increase-socket-timeout-to-ac.patch -> 0040-qtest-Increase-socket-timeout-to-ac.patch 0042-dictzip-Fix-on-big-endian-systems.patch -> 0041-dictzip-Fix-on-big-endian-systems.patch 0043-Fix-tigervnc-long-press-issue.patch -> 0042-Fix-tigervnc-long-press-issue.patch 0044-xen_disk-Add-suse-specific-flush-di.patch -> 0043-xen_disk-Add-suse-specific-flush-di.patch 0045-Split-large-discard-requests-from-b.patch -> 0044-Split-large-discard-requests-from-b.patch 0046-net-mipsnet-check-packet-length-aga.patch -> 0045-net-mipsnet-check-packet-length-aga.patch 0047-i386-kvmvapic-initialise-imm32-vari.patch -> 0046-i386-kvmvapic-initialise-imm32-vari.patch 0048-fix-xen-hvm-direct-kernel-boot.patch -> 0047-fix-xen-hvm-direct-kernel-boot.patch 0049-vga-add-sr_vbe-register-set.patch -> 0048-vga-add-sr_vbe-register-set.patch 0050-esp-check-command-buffer-length-bef.patch -> 0049-esp-check-command-buffer-length-bef.patch 0051-esp-check-dma-length-before-reading.patch -> 0050-esp-check-dma-length-before-reading.patch 0052-scsi-pvscsi-check-command-descripto.patch -> 0051-scsi-pvscsi-check-command-descripto.patch 0053-scsi-mptsas-infinite-loop-while-fet.patch -> 0052-scsi-mptsas-infinite-loop-while-fet.patch 0054-scsi-megasas-use-appropriate-proper.patch -> 0053-scsi-megasas-use-appropriate-proper.patch 0055-scsi-megasas-check-read_queue_head-.patch -> 0054-scsi-megasas-check-read_queue_head-.patch 0056-scsi-megasas-null-terminate-bios-ve.patch -> 0055-scsi-megasas-null-terminate-bios-ve.patch 0057-vmsvga-move-fifo-sanity-checks-to-v.patch -> 0056-vmsvga-move-fifo-sanity-checks-to-v.patch 0058-vmsvga-don-t-process-more-than-1024.patch -> 0057-vmsvga-don-t-process-more-than-1024.patch 0059-block-iscsi-avoid-potential-overflo.patch -> 0058-block-iscsi-avoid-potential-overflo.patch 0060-scsi-esp-check-TI-buffer-index-befo.patch -> 0059-scsi-esp-check-TI-buffer-index-befo.patch 0061-xen-introduce-dummy-system-device.patch -> 0060-xen-introduce-dummy-system-device.patch 0062-xen-write-information-about-support.patch -> 0061-xen-write-information-about-support.patch 0063-xen-add-pvUSB-backend.patch -> 0062-xen-add-pvUSB-backend.patch 0064-usb-Fix-conditions-that-xen-usb.c-i.patch -> 0063-usb-Fix-conditions-that-xen-usb.c-i.patch 0065-vnc-add-configurable-keyboard-delay.patch -> 0064-vnc-add-configurable-keyboard-delay.patch 0066-scsi-megasas-initialise-local-confi.patch -> 0065-scsi-megasas-initialise-local-confi.patch 0067-xen-SUSE-xenlinux-unplug-for-emulat.patch -> 0066-xen-SUSE-xenlinux-unplug-for-emulat.patch 0068-scsi-esp-check-buffer-length-before.patch -> 0067-scsi-esp-check-buffer-length-before.patch 0069-scsi-esp-respect-FIFO-invariant-aft.patch -> 0068-scsi-esp-respect-FIFO-invariant-aft.patch 0070-pci-assign-Move-Invalid-ROM-error-m.patch -> 0069-pci-assign-Move-Invalid-ROM-error-m.patch 0071-configure-add-echo_version-helper.patch -> 0070-configure-add-echo_version-helper.patch 0072-configure-support-vte-2.91.patch -> 0071-configure-support-vte-2.91.patch ------------------------------------------------------------------- Tue Jul 19 22:17:41 UTC 2016 - brogers@suse.com - Clean up the udev ifdeffery to cover systemd as well - Also trigger udev rules under systemd (bsc#989655) - Move s390x sysctl into if ------------------------------------------------------------------- Thu Jul 14 17:24:00 UTC 2016 - brogers@suse.com - Align spec file closer to the one used in OBS - Enable vte to be used again in more configurations (bsc#988855) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0071-configure-add-echo_version-helper.patch 0072-configure-support-vte-2.91.patch ------------------------------------------------------------------- Thu Jul 14 14:32:20 UTC 2016 - agraf@suse.com - Allow s390x kvm enabling sysctl to fail - Enable ceph on aarch64 (bsc#979473) - Rename libceph to librbd for sle12sp2 (FATE#321010) ------------------------------------------------------------------- Tue Jul 12 11:09:58 UTC 2016 - brogers@suse.com - Use BuildRequires: librbd-devel if is_opensuse defined and true for compatibility with Leap 42.2 ------------------------------------------------------------------- Mon Jul 4 06:20:16 UTC 2016 - glin@suse.com - Fix OVMF iPXE network menu (bsc#986033, boo#987488) ipxe-efi-fix-garbage-bytes-in-device-path.patch ipxe-efi-fix-uninitialised-data-in-HII.patch ------------------------------------------------------------------- Fri Jul 1 16:34:16 UTC 2016 - brogers@suse.com - Fix more potential OOB accesses in 53C9X emulation (CVE-2016-5238 bsc#982959) 0068-scsi-esp-check-buffer-length-before.patch 0069-scsi-esp-respect-FIFO-invariant-aft.patch - Avoid "Invalid ROM" error message when it is not appropriate (bsc#982927) 0070-pci-assign-Move-Invalid-ROM-error-m.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Tue Jun 21 16:55:05 UTC 2016 - ohering@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0067-xen-SUSE-xenlinux-unplug-for-emulat.patch (bsc#953339, bsc#953362, bsc#953518, bsc#984981) ------------------------------------------------------------------- Fri Jun 10 20:33:43 UTC 2016 - brogers@suse.com - Fix host information leak to guest in MegaRAID SAS 8708EM2 Host Bus AdapterMegaRAID SAS 8708EM2 Host Bus Adapter emulation support (CVE-2016-5105 bsc#982017) * Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 0066-scsi-megasas-initialise-local-confi.patch ------------------------------------------------------------------- Fri Jun 10 15:35:27 UTC 2016 - brogers@suse.com - Address various security/stability issues * Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Fix OOB access in megasas emulated device (CVE-2016-5106 bsc#982018) 0054-scsi-megasas-use-appropriate-proper.patch * Fix OOB access in megasas emulated device (CVE-2016-5107 bsc#982019) 0055-scsi-megasas-check-read_queue_head-.patch * Fix OOB access in megasas emulated device (CVE-2016-5337 bsc#983961) 0056-scsi-megasas-null-terminate-bios-ve.patch * Correct the vmvga fifo access checks (CVE-2016-4454 bsc#982222) 0057-vmsvga-move-fifo-sanity-checks-to-v.patch * Fix potential DoS issue in vmvga processing (CVE-2016-4453 bsc#982223) 0058-vmsvga-don-t-process-more-than-1024.patch * Fix heap buffer overflow flaw when iscsi protocol is used (CVE-2016-5126 bsc#982285) 0059-block-iscsi-avoid-potential-overflo.patch * Fix OOB access in 53C9X emulation (CVE-2016-5338 bsc#983982) 0060-scsi-esp-check-TI-buffer-index-befo.patch - Add support to qemu for pv-usb under Xen (fate#316612) 0061-xen-introduce-dummy-system-device.patch 0062-xen-write-information-about-support.patch 0063-xen-add-pvUSB-backend.patch 0064-usb-Fix-conditions-that-xen-usb.c-i.patch - Provide ability to rate limit keyboard events from the vnc server. This is part of the solution to an issue affecting openQA testing, where characters are lost, resulting in unexpected failures (bsc#974914) 0065-vnc-add-configurable-keyboard-delay.patch ------------------------------------------------------------------- Fri Jun 3 17:29:41 UTC 2016 - brogers@suse.com - Adjust to parallel changes in virglrenderer packages - no longer "BuildRequires" virglrenderer directly, just the devel package. ------------------------------------------------------------------- Wed Jun 1 17:14:40 UTC 2016 - brogers@suse.com - Fix build compatibility with gcc6 wrt ipxe rom where compiler warnings are treated as errors. ipxe-ath9k-Fix-buffer-overrun-for-ar9287.patch ipxe-mucurses-Fix-GCC-6-nonnull-compare-errors.patch ipxe-sis190-Fix-building-with-GCC-6.patch ipxe-skge-Fix-building-with-GCC-6.patch ipxe-ath-Fix-building-with-GCC-6.patch ipxe-legacy-Fix-building-with-GCC-6.patch - Fix ipxe build script which fails under perl v5.24 ipxe-util-v5.24-perl-errors-on-redeclare.patch - Specify build time disk space requirements for ppc64 and ppc64le ------------------------------------------------------------------- Wed Jun 1 14:31:51 UTC 2016 - agraf@suse.com - Add sysctl script and %post on s390x to allow kvm usage (bsc#975331) ------------------------------------------------------------------- Tue May 31 15:42:59 CEST 2016 - behlert@suse.com - increase required disk space, needed on ppc64le [bsc#982365] ------------------------------------------------------------------- Sat May 28 13:09:45 UTC 2016 - brogers@suse.com - Disable qemu-testsuite on s390x for now - there is an unresolved test failure. ------------------------------------------------------------------- Wed May 25 18:35:03 UTC 2016 - afaerber@suse.com - Enable NUMA for aarch64 (fate#319979) ------------------------------------------------------------------- Tue May 24 18:04:11 UTC 2016 - brogers@suse.com - Address various security/stability issues * Fix regression of vga behavior introduced in v2.6.0-rc5 with fix for CVE-2016-3712 (bsc#978160) 0049-vga-add-sr_vbe-register-set.patch * Avoid OOB access in 53C9X emulation CVE-2016-4439 (bsc#980711) 0050-esp-check-command-buffer-length-bef.patch * Avoid OOB access in 53C9X emulation CVE-2016-4441 (bsc#980723) 0051-esp-check-dma-length-before-reading.patch * Avoid OOB access in Vmware PV SCSI emulation CVE-2016-4952 (bsc#981266) 0052-scsi-pvscsi-check-command-descripto.patch * Avoid potential DoS in LSI SAS1068 emulation CVE-2016-4964 (bsc#981399) 0053-scsi-mptsas-infinite-loop-while-fet.patch - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 ------------------------------------------------------------------- Wed May 11 20:44:56 UTC 2016 - brogers@suse.com - Update to v2.6.0 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 ------------------------------------------------------------------- Mon May 9 16:49:11 UTC 2016 - brogers@suse.com - Update to v2.6.0-rc5 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 * Fixes vga vulnerability CVE-2016-3710 (bsc#978158) * Fixes vga vulnerability CVE-2016-3712 (bsc#978160) ------------------------------------------------------------------- Tue May 3 22:43:38 UTC 2016 - brogers@suse.com - Only build efi roms on x86_64 ------------------------------------------------------------------- Tue May 3 03:25:35 UTC 2016 - cyliu@suse.com - fix bsc#970791: xen hvm direct kernel boot issue previous 0045-Revert-Revert-xen-hvm-increase-maxm.patch is a temp workaround, delete it, and add new patch 0048-fix-xen-hvm-direct-kernel-boot.patch to fix the issue. - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped: 0045-Revert-Revert-xen-hvm-increase-maxm.patch 0046-Split-large-discard-requests-from-b.patch 0047-net-mipsnet-check-packet-length-aga.patch 0048-i386-kvmvapic-initialise-imm32-vari.patch * Patches added: 0045-Split-large-discard-requests-from-b.patch 0046-net-mipsnet-check-packet-length-aga.patch 0047-i386-kvmvapic-initialise-imm32-vari.patch 0048-fix-xen-hvm-direct-kernel-boot.patch ------------------------------------------------------------------- Mon May 2 19:13:08 UTC 2016 - brogers@suse.com - Update to v2.6.0-rc4 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 ------------------------------------------------------------------- Tue Apr 26 13:07:53 UTC 2016 - brogers@suse.com - Address various security/stability issues - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Fix OOB access in MIPSnet emulated controller CVE-2016-4002 (bsc#975136) 0047-net-mipsnet-check-packet-length-aga.patch * Fix possible host data leakage to guest from TPR access CVE-2016-4020 (bsc#975700) 0048-i386-kvmvapic-initialise-imm32-vari.patch ------------------------------------------------------------------- Fri Apr 22 15:43:04 UTC 2016 - afaerber@suse.com - Partially revert sr#106884 cleanup - Indicate SUSE version ------------------------------------------------------------------- Thu Apr 21 21:30:14 UTC 2016 - brogers@suse.com - Update to v2.6.0-rc3 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 - Use ovmf-tools to build efi pxe roms ------------------------------------------------------------------- Thu Apr 14 17:54:18 UTC 2016 - brogers@suse.com - Update to v2.6.0-rc2 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 * Fixes bsc#974141 * Add support for virtio-gpu (fate#319660) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped: 0047-tests-Use-correct-config-param-for-.patch (upstream) ------------------------------------------------------------------- Thu Mar 31 17:08:49 UTC 2016 - ohering@suse.de - Slightly reduce delta with qemu-opensuse ------------------------------------------------------------------- Thu Mar 31 13:12:28 UTC 2016 - brogers@suse.com - It appears we have the wrong criteria for inclusion of the test-crypto-pbkdf test. Fix to use CONFIG_NETTLE_KDF instead of CONFIG_NETTLE. - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0047-tests-Use-correct-config-param-for-.patch ------------------------------------------------------------------- Tue Mar 29 01:34:47 UTC 2016 - brogers@suse.com - Update to v2.6.0-rc0 (fate#316228) cf. http://wiki.qemu.org/ChangeLog/2.6 - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped (upstream except as noted): 0041-s390-Remove-legacy-s390-virtio-mach.patch 0044-Don-t-change-total_size-when-creati.patch 0045-fw_cfg-avoid-calculating-invalid-cu.patch 0046-i386-avoid-null-pointer-dereference.patch 0047-scsi-initialise-info-object-with-ap.patch 0048-ehci-make-idt-processing-more-robus.patch 0049-net-ne2000-fix-bounds-check-in-iopo.patch 0050-ide-ahci-reset-ncq-object-to-unused.patch 0051-net-vmxnet3-avoid-memory-leakage-in.patch 0052-hmp-fix-sendkey-out-of-bounds-write.patch 0053-usb-ehci-add-capability-mmio-write-.patch 0054-e1000-eliminate-infinite-loops-on-o.patch * Patches renamed: 0042-qtest-Increase-socket-timeout-to-ac.patch -> 0041-qtest-Increase-socket-timeout-to-ac.patch 0043-dictzip-Fix-on-big-endian-systems.patch -> 0042-dictzip-Fix-on-big-endian-systems.patch 0055-Fix-tigervnc-long-press-issue.patch -> 0043-Fix-tigervnc-long-press-issue.patch 0056-xen_disk-Add-suse-specific-flush-di.patch -> 0044-xen_disk-Add-suse-specific-flush-di.patch 0057-Revert-Revert-xen-hvm-increase-maxm.patch -> 0045-Revert-Revert-xen-hvm-increase-maxm.patch 0058-Split-large-discard-requests-from-b.patch -> 0046-Split-large-discard-requests-from-b.patch ------------------------------------------------------------------- Thu Mar 24 17:48:43 UTC 2016 - ohering@suse.de - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0058-Split-large-discard-requests-from-b.patch (bsc#964427) ------------------------------------------------------------------- Fri Mar 11 23:04:20 UTC 2016 - brogers@suse.com - Temporarily revert an upstream patch to fix the failure of Xen HVM network installs. Our QEMU is incompatible with current Xen because Xen hasn't yet been adjusted to that upstream change in QEMU's Xen HVM support. (bsc#970791) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0057-Revert-Revert-xen-hvm-increase-maxm.patch ------------------------------------------------------------------- Wed Mar 9 23:34:52 UTC 2016 - brogers@suse.com - port patch which has been maintained in Xen provided QEMU - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0056-xen_disk-Add-suse-specific-flush-di.patch ------------------------------------------------------------------- Thu Mar 3 08:49:42 UTC 2016 - cyliu@suse.com - port patch for bsc#882405 to SP2 - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches added: 0055-Fix-tigervnc-long-press-issue.patch ------------------------------------------------------------------- Thu Feb 25 23:03:59 UTC 2016 - brogers@suse.com * This is a major release update from v2.3.1 to v2.5.0 cf. http://wiki.qemu-project.org/ChangeLog/2.5 (fate#316228) cf. http://wiki.qemu-project.org/ChangeLog/2.4 - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP2 * Patches dropped (upstream except as noted): 0015-linux-user-arm-no-tb_flush-on-reset.patch (tb_flush() not called) 0031-Legacy-Patch-kvm-qemu-preXX-report-.patch (more trouble than its worth) 0044-s390-Default-virtio-blk-to-ccw.patch 0046-configure-reduce-libseccomp-version.patch 0047-pcnet-force-the-buffer-access-to-be.patch 0048-linux-user-Allocate-thunk-size-dyna.patch 0049-slirp-use-less-predictable-director.patch 0051-vnc-fix-memory-corruption-CVE-2015-.patch 0052-qcow2-Handle-EAGAIN-returned-from-u.patch 0053-qcow2-Make-qcow2_alloc_bytes-more-e.patch 0054-net-avoid-infinite-loop-when-receiv.patch 0055-net-add-checks-to-validate-ring-buf.patch 0056-ide-fix-ATAPI-command-permissions.patch 0057-virtio-introduce-virtqueue_unmap_sg.patch 0058-virtio-introduce-virtqueue_discard.patch 0059-virtio-net-correctly-drop-truncated.patch 0060-e1000-Avoid-infinite-loop-in-proces.patch 0062-eepro100-Prevent-two-endless-loops.patch 0063-pcnet-fix-rx-buffer-overflow-CVE-20.patch 0064-fw_cfg-add-check-to-validate-curren.patch (see 0045-* patch added) 0067-ui-vnc-avoid-floating-point-excepti.patch 0068-virtio-serial-fix-ANY_LAYOUT.patch 0070-msix-implement-pba-write-but-read-o.patch 0072-ahci-add-ncq_err-helper.patch 0074-vmxnet3-Support-reading-IMR-registe.patch 0076-net-vmxnet3-Refine-l2-header-valida.patch ipxe-prefix-Use-.bss16-as-temporary-stac.patch ipxe-zbin-Fix-check-for-existence-of-mos.patch ipxe-zbin-Perform-extra-normalisation-af.patch ipxe-zbin-Remove-now-unused-unnrv2b.S-de.patch ipxe-zbin-Use-LZMA-compression.patch vgabios-Add-config-option-for-assembler-.patch vgabios-Emulate-leal-instruction.patch SLOF_ppc64le.patch * Patches renamed: 0032-console-add-question-mark-escape-op.patch -> 0030-console-add-question-mark-escape-op.patch 0033-Make-char-muxer-more-robust-wrt-sma.patch -> 0031-Make-char-muxer-more-robust-wrt-sma.patch 0034-linux-user-lseek-explicitly-cast-no.patch -> 0032-linux-user-lseek-explicitly-cast-no.patch 0035-virtfs-proxy-helper-Provide-__u64-f.patch -> 0033-virtfs-proxy-helper-Provide-__u64-f.patch 0036-configure-Enable-PIE-for-ppc-and-pp.patch -> 0034-configure-Enable-PIE-for-ppc-and-pp.patch 0037-Raise-soft-address-space-limit-to-h.patch -> 0035-Raise-soft-address-space-limit-to-h.patch 0038-increase-x86_64-physical-bits-to-42.patch -> 0036-increase-x86_64-physical-bits-to-42.patch 0039-vnc-provide-fake-color-map.patch -> 0037-vnc-provide-fake-color-map.patch 0040-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0038-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0041-i8254-Fix-migration-from-SLE11-SP2.patch -> 0039-i8254-Fix-migration-from-SLE11-SP2.patch 0042-acpi_piix4-Fix-migration-from-SLE11.patch -> 0040-acpi_piix4-Fix-migration-from-SLE11.patch 0043-s390-Remove-legacy-s390-virtio-mach.patch -> 0041-s390-Remove-legacy-s390-virtio-mach.patch 0045-qtest-Increase-socket-timeout-to-ac.patch -> 0042-qtest-Increase-socket-timeout-to-ac.patch 0050-dictzip-Fix-on-big-endian-systems.patch -> 0043-dictzip-Fix-on-big-endian-systems.patch 0061-Don-t-change-total_size-when-creati.patch -> 0044-Don-t-change-total_size-when-creati.patch 0065-i386-avoid-null-pointer-dereference.patch -> 0046-i386-avoid-null-pointer-dereference.patch 0066-scsi-initialise-info-object-with-ap.patch -> 0047-scsi-initialise-info-object-with-ap.patch 0069-ehci-make-idt-processing-more-robus.patch -> 0048-ehci-make-idt-processing-more-robus.patch 0071-net-ne2000-fix-bounds-check-in-iopo.patch -> 0049-net-ne2000-fix-bounds-check-in-iopo.patch 0073-ide-ahci-reset-ncq-object-to-unused.patch -> 0050-ide-ahci-reset-ncq-object-to-unused.patch 0075-net-vmxnet3-avoid-memory-leakage-in.patch -> 0051-net-vmxnet3-avoid-memory-leakage-in.patch 0077-hmp-fix-sendkey-out-of-bounds-write.patch -> 0052-hmp-fix-sendkey-out-of-bounds-write.patch 0078-usb-ehci-add-capability-mmio-write-.patch -> 0053-usb-ehci-add-capability-mmio-write-.patch 0079-e1000-eliminate-infinite-loops-on-o.patch -> 0054-e1000-eliminate-infinite-loops-on-o.patch * Patches added: 0045-fw_cfg-avoid-calculating-invalid-cu.patch ------------------------------------------------------------------- Thu Feb 25 18:18:29 UTC 2016 - brogers@suse.com - Begin package changes targeted for SLE-12-SP2 Point to just created SLE12-SP2 git branch in update_git.sh ------------------------------------------------------------------- Thu Feb 4 18:48:05 UTC 2016 - brogers@suse.com - Avoid potential QEMU DoS for long HMP sendkey command argument (CVE-2015-8619 bsc#960334) - Fix case of malicious privileged guest user being able to cause QEMU DoS by writing to read-only EHCI capabilities registers (CVE-2016-2198 bsc#964413) - Avoid potential QEMU DoS (infinite loop) in e1000 device emulation, causable by malicious privileged user within guest (CVE-2016-1981 bsc#963782) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0077-hmp-fix-sendkey-out-of-bounds-write.patch 0078-usb-ehci-add-capability-mmio-write-.patch 0079-e1000-eliminate-infinite-loops-on-o.patch ------------------------------------------------------------------- Thu Jan 28 03:13:09 UTC 2016 - cyliu@suse.com - Fix incorrect l2 header validation leads to a crash via assert(2) call (CVE-2015-8744 bsc#960835) - Fix vmxnet3 host memory leakage (CVE-2015-8568 CVE-2015-8567 bsc#959386) - Fix reading IMR registers leads to a crash via assert(2) call (CVE-2015-8745 bsc#960708) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0074-vmxnet3-Support-reading-IMR-registe.patch 0075-net-vmxnet3-avoid-memory-leakage-in.patch 0076-net-vmxnet3-Refine-l2-header-valida.patch ------------------------------------------------------------------- Wed Jan 27 06:18:32 UTC 2016 - lma@suse.com - Fix vulnerabilities in vnc floating point exception. (CVE-2015-8504 bsc#958491) - Fix vulnerabilities in buffer overflow in virtio-serial. (CVE-2015-5745 bsc#940929) - Fix vulnerabilities in infinite loop in ehci_advance_state results in DoS. (CVE-2015-8558 bsc#959005) - Fix vulnerabilities in pci null pointer dereference issue. (CVE-2015-7549 bsc#958917) - Fix vulnerabilities in ne2000 OOB memory access in ioport r/w functions. (CVE-2015-8743 bsc#960725) - Fix vulnerabilities in ahci use-after-free vulnerability in aio port commands. (CVE-2016-1568 bsc#961333) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0067-ui-vnc-avoid-floating-point-excepti.patch 0068-virtio-serial-fix-ANY_LAYOUT.patch 0069-ehci-make-idt-processing-more-robus.patch 0070-msix-implement-pba-write-but-read-o.patch 0071-net-ne2000-fix-bounds-check-in-iopo.patch 0072-ahci-add-ncq_err-helper.patch 0073-ide-ahci-reset-ncq-object-to-unused.patch ------------------------------------------------------------------- Tue Jan 26 21:35:21 UTC 2016 - brogers@suse.com - Fix potential OOB memory access in processing firmware configuration. (CVE-2016-1714 bsc#961691) - Fix potential NULL pointer derefernce when processing hmp i/o command. (CVE-2016-1922 bsc#962320) - Fix wrong sized memset in megasas command handler. (CVE-2015-8613 bsc#961556) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0064-fw_cfg-add-check-to-validate-curren.patch 0065-i386-avoid-null-pointer-dereference.patch 0066-scsi-initialise-info-object-with-ap.patch ------------------------------------------------------------------- Thu Dec 3 17:48:07 UTC 2015 - brogers@suse.com - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0063-pcnet-fix-rx-buffer-overflow-CVE-20.patch ------------------------------------------------------------------- Wed Dec 2 02:52:55 UTC 2015 - cyliu@suse.com - Security Fix: CVE-2015-8345 (bsc#956829): qemu: net: eepro100: infinite loop in processing command block list - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0062-eepro100-Prevent-two-endless-loops.patch ------------------------------------------------------------------- Fri Nov 13 20:18:24 UTC 2015 - brogers@suse.com - Due to space restrictions in limited bios data areas, don't create mptable if vcpu count is "high" (ie more than ~19). (bsc#954864) (No supported guests are negatively impacted by this change, which is taken from upstream seabios) * Patches added: seabios-mptable-Don-t-create-mptable-if-.patch ------------------------------------------------------------------- Wed Nov 4 16:22:55 UTC 2015 - brogers@suse.com - Fix bsc#943446: qemu-img convert doesn't create MB aligned VHDs anymore - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0061-Don-t-change-total_size-when-creati.patch ------------------------------------------------------------------- Thu Oct 29 16:31:31 UTC 2015 - afaerber@suse.com - Build SLOF from source (bsc#949016) SLOF_ppc64le.patch ------------------------------------------------------------------- Thu Oct 8 17:03:35 UTC 2015 - afaerber@suse.com - Clean up DictZip and tar block drivers (bsc#945778) 0028-block-Add-support-for-DictZip-enabl.patch 0029-block-Add-tar-container-format.patch 0050-dictzip-Fix-on-big-endian-systems.patch ------------------------------------------------------------------- Thu Oct 8 16:11:16 UTC 2015 - brogers@suse.com - Fix potential hang in emulated e1000 nic (bsc#944697 CVE-2015-6815) - Fix potential DoS in virtio-net (bsc#947159 CVE-2015-7295) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0057-virtio-introduce-virtqueue_unmap_sg.patch 0058-virtio-introduce-virtqueue_discard.patch 0059-virtio-net-correctly-drop-truncated.patch 0060-e1000-Avoid-infinite-loop-in-proces.patch ------------------------------------------------------------------- Fri Oct 2 16:25:02 UTC 2015 - afaerber@suse.com - Split off qemu-testsuite package (backport from openSUSE) ------------------------------------------------------------------- Tue Sep 29 15:51:35 UTC 2015 - afaerber@suse.com - List data files explicitly (backport from openSUSE) * Move u-boot.e500 from qemu package to qemu-ppc where it belongs * Do not package stock firmware files in qemu package on non-x86_64 ------------------------------------------------------------------- Thu Sep 24 14:20:55 UTC 2015 - brogers@suse.com - Fix pxe boot for pre v1.5 machine types (bsc#946020) * Patches added: ipxe-zbin-Remove-now-unused-unnrv2b.S-de.patch ipxe-zbin-Fix-check-for-existence-of-mos.patch ------------------------------------------------------------------- Fri Sep 18 17:52:19 UTC 2015 - brogers@suse.com - Fix vulnerability in ide emulation - potential divide-by-zero. (CVE-2015-6855 bsc#945404) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0056-ide-fix-ATAPI-command-permissions.patch ------------------------------------------------------------------- Thu Sep 17 20:19:10 UTC 2015 - brogers@suse.com - Fix vulnerabilities in ne2000 nic emulation. (CVE-2015-5278 bsc#945989) (CVE-2015-5279 bsc#945987) - Fix other error in code related to bsc#936537 - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0053-qcow2-Make-qcow2_alloc_bytes-more-e.patch 0054-net-avoid-infinite-loop-when-receiv.patch 0055-net-add-checks-to-validate-ring-buf.patch ------------------------------------------------------------------- Fri Sep 11 22:48:56 UTC 2015 - brogers@suse.com - Fix possible qemu-img error when converting to compressed qcow2 image (bsc#936537) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0052-qcow2-Handle-EAGAIN-returned-from-u.patch ------------------------------------------------------------------- Fri Sep 11 14:50:40 UTC 2015 - afaerber@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Fix CVE-2015-5225 (bsc#942845): 0051-vnc-fix-memory-corruption-CVE-2015-.patch ------------------------------------------------------------------- Wed Aug 12 15:54:52 UTC 2015 - brogers@suse.com - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * This is stable release update from v2.3.0 to v2.3.1 cf. http://wiki.qemu-project.org/ChangeLog/2.3 (fate#314497) * Patches dropped: 0046-fdc-force-the-fifo-access-to-be-in-.patch 0050-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch 0053-ide-Check-array-bounds-before-writi.patch 0054-ide-atapi-Fix-START-STOP-UNIT-comma.patch 0055-ide-Clear-DRQ-after-handling-all-ex.patch * Patches renamed: 0047-configure-reduce-libseccomp-version.patch -> 0046-configure-reduce-libseccomp-version.patch 0048-pcnet-force-the-buffer-access-to-be.patch -> 0047-pcnet-force-the-buffer-access-to-be.patch 0049-linux-user-Allocate-thunk-size-dyna.patch -> 0048-linux-user-Allocate-thunk-size-dyna.patch 0051-slirp-use-less-predictable-director.patch -> 0049-slirp-use-less-predictable-director.patch 0052-dictzip-Fix-on-big-endian-systems.patch -> 0050-dictzip-Fix-on-big-endian-systems.patch ------------------------------------------------------------------- Thu Jul 16 16:15:14 UTC 2015 - brogers@suse.com - Fix potential heap overflow in IDE subsystem when certain ATAPI commands are processed. (CVE-2015-5154 bsc#938344) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0053-ide-Check-array-bounds-before-writi.patch 0054-ide-atapi-Fix-START-STOP-UNIT-comma.patch 0055-ide-Clear-DRQ-after-handling-all-ex.patch ------------------------------------------------------------------- Wed Jul 8 19:18:38 UTC 2015 - brogers@suse.com - Enable RDMA migration (fate#317015) - Fix dictzip on big endian systems (bsc#937572) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0052-dictzip-Fix-on-big-endian-systems.patch ------------------------------------------------------------------- Mon Jun 8 19:14:41 UTC 2015 - brogers@suse.com - Fix vgabios incompatibility with X's x86emu emulator (bsc#933981) * Patches added: vgabios-Add-config-option-for-assembler-.patch ------------------------------------------------------------------- Fri Jun 5 21:28:18 UTC 2015 - brogers@suse.com - Avoid predictable directory name for smb config (bsc#932267 CVE-2015-4037) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0051-slirp-use-less-predictable-director.patch ------------------------------------------------------------------- Tue Jun 2 18:31:20 UTC 2015 - brogers@suse.com - Fix abort encountered in qcow2 snapshot code. (bsc933132) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0050-qcow2-Set-MIN_L2_CACHE_SIZE-to-2.patch ------------------------------------------------------------------- Tue Jun 2 17:59:43 UTC 2015 - brogers@suse.com - Fix qemu-linux-user on powerpc - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0049-linux-user-Allocate-thunk-size-dyna.patch ------------------------------------------------------------------- Tue Jun 2 12:42:34 UTC 2015 - brogers@suse.com - Fix buffer overflow in pcnet emulation (bsc#932770 CVE-2015-3209) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches added: 0048-pcnet-force-the-buffer-access-to-be.patch ------------------------------------------------------------------- Tue Jun 2 00:47:53 UTC 2015 - brogers@suse.com - Update to v2.3.0: cf. http://wiki.qemu-project.org/ChangeLog/2.3 (fate#314497) * qemu-seabios and qemu-vgabios change version to 1.8.1 - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 * Patches dropped: 0037-xen_disk-add-discard-support.patch 0046-qemu-img-add-nocow-option.patch 0047-tests-Don-t-run-qom-test-twice.patch 0048-qtest-Assure-that-init_socket-s-lis.patch 0049-qtest-Add-error-reporting-to-socket.patch 0050-qtest-Be-paranoid-about-accept-addr.patch 0051-seccomp-add-timerfd_create-and-time.patch 0052-seccomp-add-shmctl-mlock-and-munloc.patch 0053-gtk-Add-handling-for-the-xfree86-ke.patch 0055-tcg-ppc64-Support-the-ELFv2-ABI.patch 0056-target-i386-Preserve-the-Z-bit-for-.patch 0057-vmstate-s-VMSTATE_INT32_LE-VMSTATE_.patch 0058-savevm-Ignore-minimum_version_id_ol.patch 0059-qemu-img-Convert-by-cluster-size-if.patch 0060-vmdk-Implement-.bdrv_write_compress.patch 0061-vmdk-Implement-.bdrv_get_info.patch 0062-module-Simplify-module_load.patch 0063-module-Don-t-complain-when-a-module.patch 0064-spapr_nvram-Correct-max-nvram-size.patch 0065-target-ppc-extract-register-length-.patch 0066-target-ppc-gdbstub-allow-byte-swapp.patch 0067-spapr_pci-fix-MSI-limit.patch 0068-spapr-Add-support-for-time-base-off.patch 0069-spapr-Add-ibm-chip-id-property-in-d.patch 0070-target-ppc-Support-dump-for-little-.patch 0071-target-ppc-Introduce-callback-for-i.patch 0072-target-ppc-Set-the-correct-endianne.patch 0073-target-ppc-Add-compat-CPU-option.patch 0074-spapr-Move-SMT-related-properties-o.patch 0075-target-ppc-Implement-compat-CPU-opt.patch 0076-target-ppc-Define-Processor-Compati.patch 0077-spapr-Add-ibm-client-architecture-s.patch 0078-spapr-Rework-spapr_fixup_cpu_dt.patch 0079-spapr-Limit-threads-per-core-accord.patch 0080-spapr-Implement-processor-compatibi.patch 0081-KVM-PPC-Enable-compatibility-mode.patch 0082-kvm-make-one_reg-helpers-available-.patch 0083-dump-Drop-pointless-error_is_set-Du.patch 0084-dump-fill-in-the-flat-header-signat.patch 0085-dump-simplify-write_start_flat_head.patch 0086-dump-eliminate-DumpState.page_shift.patch 0087-dump-eliminate-DumpState.page_size-.patch 0088-dump-select-header-bitness-based-on.patch 0089-dump-hoist-lzo_init-from-get_len_bu.patch 0090-dump-simplify-get_len_buf_out.patch 0091-dump-Make-DumpState-and-endian-conv.patch 0092-linux-headers-update-linux-headers-.patch 0093-target-ppc-Create-versionless-CPU-c.patch 0094-target-ppc-Move-alias-lookup-after-.patch 0095-target-ppc-Remove-redundant-POWER7-.patch 0096-KVM-PPC-Expose-fixup-hcall-capabili.patch 0097-PPC-spapr-Expose-hypervisor-node-in.patch 0098-spapr_hcall-Split-h_set_mode.patch 0099-spapr_hcall-Add-address-translation.patch 0100-PPC-KVM-Make-pv-hcall-endian-agnost.patch 0101-spapr_pci-Advertise-MSI-quota.patch 0102-spapr-Add-qemu-boot-menu-property-t.patch 0103-target-ppc-Add-support-for-POWER8-p.patch 0104-spapr-Add-rtas_st_buffer-utility-fu.patch 0105-spapr-Fix-RTAS-sysparm-DIAGNOSTICS_.patch 0106-spapr-Add-RTAS-sysparm-UUID.patch 0107-spapr-Add-RTAS-sysparm-SPLPAR-Chara.patch 0108-virtio-introduce-device-specific-mi.patch 0109-virtio-net-implement-per-device-mig.patch 0110-virtio-blk-implement-per-device-mig.patch 0111-virtio-serial-implement-per-device-.patch 0112-virtio-balloon-implement-per-device.patch 0113-virtio-rng-implement-per-device-mig.patch 0114-virtio-add-subsections-to-the-migra.patch 0115-exec-introduce-target_words_bigendi.patch 0116-cpu-introduce-CPUClass-virtio_is_bi.patch 0117-virtio-add-endian-ambivalent-suppor.patch 0118-virtio-memory-accessors-for-endian-.patch 0119-virtio-allow-byte-swapping-for-vrin.patch 0120-virtio-net-use-virtio-wrappers-to-a.patch 0121-virtio-balloon-use-virtio-wrappers-.patch 0122-virtio-blk-use-virtio-wrappers-to-a.patch 0123-virtio-scsi-use-virtio-wrappers-to-.patch 0124-virtio-serial-bus-use-virtio-wrappe.patch 0125-virtio-9p-use-virtio-wrappers-to-ac.patch 0126-target-ppc-enable-virtio-endian-amb.patch 0127-target-ppc-KVMPPC_H_CAS-fix-cpu-ver.patch 0128-target-ppc-Add-pvr_match-callback.patch 0129-target-ppc-Remove-POWER7-and-POWER8.patch 0130-qemu-VGA-endian-swap-low-level-draw.patch 0131-pc-bios-s390-ccw-virtio_load_direct.patch 0132-pc-bios-s390-ccw-do-a-subsystem-res.patch 0133-pc-bios-s390-ccw-fix-for-fragmented.patch 0134-pc-bios-s390-ccw-make-checkpatch-ha.patch 0135-pc-bios-s390-ccw-cleanup-and-enhanc.patch 0136-pc-bios-s390-ccw-handle-different-s.patch 0137-pc-bios-s390-ccw-store-proper-subsy.patch 0138-target-i386-kvm-Don-t-enable-MONITO.patch 0139-ivshmem-check-the-value-returned-by.patch 0140-usb-fix-up-post-load-checks.patch 0141-slirp-udp-fix-NULL-pointer-derefere.patch 0142-cirrus-fix-blit-region-check.patch 0143-cirrus-don-t-overflow-CirrusVGAStat.patch 0144-block-raw-posix-Try-both-FIEMAP-and.patch 0145-block-raw-posix-Fix-disk-corruption.patch 0146-block-raw-posix-use-seek_hole-ahead.patch 0147-migration-fix-parameter-validation-.patch 0148-exec-add-wrapper-for-host-pointer-a.patch 0149-cpu-assert-host-pointer-offset-with.patch 0150-cpu-verify-that-block-host-is-set.patch 0151-hw-input-hid.c-Fix-capslock-hid-cod.patch 0152-CVE-2015-1779-incrementally-decode-.patch 0153-CVE-2015-1779-limit-size-of-HTTP-he.patch 0154-vpc-Ignore-geometry-for-large-image.patch 0155-block-vpc-make-calculate_geometry-s.patch 0156-block-vpc-rename-footer-size-footer.patch 0157-block-vpc-remove-disabled-code-from.patch * Patches renamed: 0038-Raise-soft-address-space-limit-to-h.patch -> 0037-Raise-soft-address-space-limit-to-h.patch 0039-increase-x86_64-physical-bits-to-42.patch -> 0038-increase-x86_64-physical-bits-to-42.patch 0040-vnc-provide-fake-color-map.patch -> 0039-vnc-provide-fake-color-map.patch 0041-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch -> 0040-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch 0042-i8254-Fix-migration-from-SLE11-SP2.patch -> 0041-i8254-Fix-migration-from-SLE11-SP2.patch 0043-acpi_piix4-Fix-migration-from-SLE11.patch -> 0042-acpi_piix4-Fix-migration-from-SLE11.patch 0044-s390-Remove-legacy-s390-virtio-mach.patch -> 0043-s390-Remove-legacy-s390-virtio-mach.patch 0045-s390-Default-virtio-blk-to-ccw.patch -> 0044-s390-Default-virtio-blk-to-ccw.patch 0054-qtest-Increase-socket-timeout-to-ac.patch -> 0045-qtest-Increase-socket-timeout-to-ac.patch 0158-fdc-force-the-fifo-access-to-be-in-.patch -> 0046-fdc-force-the-fifo-access-to-be-in-.patch * Patches added: 0047-configure-reduce-libseccomp-version.patch - Other Patches dropped: ipxe-build-Work-around-bug-in-gcc-4.8.patch ipxe-zbin-Fix-size-used-for-memset-in-al.patch ipxe-build-Avoid-strict-aliasing-warning.patch vgabios-Make-sure-stdvga_list_modes-doesn-t-overrun-.patch - Other Patches added: seabios_128kb.patch seabios_checkrom_typo.patch seabios_avoid_smbios_signature_string.patch ipxe-prefix-Use-.bss16-as-temporary-stac.patch ipxe-zbin-Perform-extra-normalisation-af.patch ipxe-zbin-Use-LZMA-compression.patch ------------------------------------------------------------------- Thu May 14 22:13:56 UTC 2015 - brogers@suse.com - In place of a very fragile fix, use upstream patch for issue in bnc#893892 * Patches dropped: vgabios-work-around-network-install-failure.patch * Patches added: vgabios-Emulate-leal-instruction.patch ------------------------------------------------------------------- Tue May 12 13:56:48 UTC 2015 - afaerber@suse.com - Fix CVE-2015-3456 (bsc#929339) 0158-fdc-force-the-fifo-access-to-be-in-.patch * Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12 ------------------------------------------------------------------- Tue Apr 28 04:52:48 UTC 2015 - cyliu@suse.com - qemu truncates vhd images in virt-rescue (bsc#886378) * Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12 * Patches added: 0154-vpc-Ignore-geometry-for-large-image.patch 0155-block-vpc-make-calculate_geometry-s.patch 0156-block-vpc-rename-footer-size-footer.patch 0157-block-vpc-remove-disabled-code-from.patch ------------------------------------------------------------------- Mon Apr 27 15:29:24 UTC 2015 - afaerber@suse.com - Fix CVE-2015-1779 (bsc#924018) * Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12 0152-CVE-2015-1779-incrementally-decode-.patch 0153-CVE-2015-1779-limit-size-of-HTTP-he.patch ------------------------------------------------------------------- Thu Apr 23 21:11:56 UTC 2015 - brogers@suse.com - Streamline update_git.sh workflow and update server used ------------------------------------------------------------------- Mon Feb 23 17:20:18 UTC 2015 - brogers@suse.com - Update kvm-supported.txt with the current rbd support status. ------------------------------------------------------------------- Sat Feb 14 14:41:12 UTC 2015 - brogers@suse.com - enable rbd build on x86_64 (qemu-block-rbd package) (FATE#318349) ------------------------------------------------------------------- Wed Feb 4 18:01:54 UTC 2015 - afaerber@suse.com - Fix USB HID key code (bnc#914521) 0151-hw-input-hid.c-Fix-capslock-hid-cod.patch - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 ------------------------------------------------------------------- Thu Jan 8 17:59:17 UTC 2015 - afaerber@suse.com - Bump copyright in qemu.spec.in ------------------------------------------------------------------- Wed Jan 7 16:16:58 UTC 2015 - agraf@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 * Fix CVE-2014-7840 for migration (bnc#905097) 0147-migration-fix-parameter-validation-.patch 0148-exec-add-wrapper-for-host-pointer-a.patch 0149-cpu-assert-host-pointer-offset-with.patch 0150-cpu-verify-that-block-host-is-set.patch ------------------------------------------------------------------- Fri Dec 5 17:50:23 UTC 2014 - brogers@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 Fix potential image corruption due to missing FIEMAP_FLAG_SYNC flag in FS_IOC_FIEMAP ioctl. (bnc#908380) * Patches added: 0144-block-raw-posix-Try-both-FIEMAP-and.patch 0145-block-raw-posix-Fix-disk-corruption.patch 0146-block-raw-posix-use-seek_hole-ahead.patch ------------------------------------------------------------------- Fri Dec 5 14:18:07 UTC 2014 - afaerber@suse.com - Fix CVE-2014-8106 for Cirrus graphics (bnc#907805) 0142-cirrus-fix-blit-region-check.patch 0143-cirrus-don-t-overflow-CirrusVGAStat.patch - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 ------------------------------------------------------------------- Mon Dec 1 23:38:12 UTC 2014 - brogers@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 * This is stable release update from v2.0.0 to v2.0.2 (bnc#897654) * Patches dropped: 0056-s390x-kvm-rework-KVM-synchronize-to.patch 0057-block-Prevent-coroutine-stack-overf.patch 0058-qdev-Fix-crash-by-validating-the-ob.patch 0059-acpi-fix-tables-for-no-hpet-configu.patch 0060-Revert-qapi-Clean-up-superfluous-nu.patch 0062-pci-assign-limit-of-msix-vectors.patch 0063-target-i386-fix-set-of-registers-ze.patch 0064-vmstate-add-VMS_MUST_EXIST.patch 0065-vmstate-add-VMSTATE_VALIDATE.patch 0066-virtio-net-fix-buffer-overflow-on-i.patch 0067-virtio-net-out-of-bounds-buffer-wri.patch 0068-virtio-out-of-bounds-buffer-write-o.patch 0069-ahci-fix-buffer-overrun-on-invalid-.patch 0070-hpet-fix-buffer-overrun-on-invalid-.patch 0071-hw-pci-pcie_aer.c-fix-buffer-overru.patch 0072-pl022-fix-buffer-overun-on-invalid-.patch 0073-vmstate-fix-buffer-overflow-in-targ.patch 0074-virtio-avoid-buffer-overrun-on-inco.patch 0075-virtio-validate-num_sg-when-mapping.patch 0076-pxa2xx-avoid-buffer-overrun-on-inco.patch 0077-ssd0323-fix-buffer-overun-on-invali.patch 0078-tsc210x-fix-buffer-overrun-on-inval.patch 0079-zaurus-fix-buffer-overrun-on-invali.patch 0080-virtio-scsi-fix-buffer-overrun-on-i.patch 0082-usb-sanity-check-setup_index-setup_.patch 0084-ssi-sd-fix-buffer-overrun-on-invali.patch 0085-openpic-avoid-buffer-overrun-on-inc.patch 0086-virtio-net-out-of-bounds-buffer-wri.patch 0087-virtio-validate-config_len-on-load.patch 0088-virtio-allow-mapping-up-to-max-queu.patch 0097-spapr_pci-Fix-number-of-returned-ve.patch 0139-virtio-net-byteswap-virtio-net-head.patch 0140-virtio-serial-don-t-migrate-the-con.patch 0172-qcow1-Check-maximum-cluster-size.patch 0173-qcow1-Validate-L2-table-size-CVE-20.patch 0175-qcow1-Validate-image-size-CVE-2014-.patch ------------------------------------------------------------------- Wed Sep 24 14:59:56 UTC 2014 - afaerber@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 * Fix CVE-2014-3640 (bnc#897654): 0177-slirp-udp-fix-NULL-pointer-derefere.patch ------------------------------------------------------------------- Thu Sep 18 14:34:25 UTC 2014 - afaerber@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 - Backported ivshmem error check (fate#314468) 0174-ivshmem-check-the-value-returned-by.patch - Fixed CVE-2014-0223 (bnc#877645) 0175-qcow1-Validate-image-size-CVE-2014-.patch - Fixed CVE-2014-3461 (bnc#878541) 0176-usb-fix-up-post-load-checks.patch ------------------------------------------------------------------- Tue Sep 16 22:28:23 UTC 2014 - brogers@suse.com - Tweaked the fix for bnc#893892 to not negatively impact the use of the cirrus emulated video card. (bnc#896726) ------------------------------------------------------------------- Thu Sep 11 20:29:35 UTC 2014 - brogers@suse.com - Add a few more refinements to kvm-supported.txt ------------------------------------------------------------------- Mon Sep 8 10:04:36 UTC 2014 - afaerber@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 * Resolve CVE-2014-0222 (bnc#877642): 0172-qcow1-Check-maximum-cluster-size.patch 0173-qcow1-Validate-L2-table-size-CVE-20.patch ------------------------------------------------------------------- Fri Sep 5 21:22:05 UTC 2014 - brogers@suse.com - Patch queue updated from git://git.suse.de/virtualization/qemu.git SLE12 Fixes issue with monitor cpu feature being exposed to guest, but KVM does not support the monitor instruction. (bnc#895369) * Patches added: 0171-target-i386-kvm-Don-t-enable-MONITO.patch ------------------------------------------------------------------- Thu Sep 4 20:23:32 UTC 2014 - brogers@suse.com - Update kvm-supported.txt to have latest SLES 12 support info, and not duplicate information that is provided through other official SUSE channels. - Work around a presumed X.org x86emu failure when doing a network install for SLES 10 or SLES 11. (bnc#893892) - added patches: * vgabios-work-around-network-install-failure.patch ------------------------------------------------------------------- Thu Aug 28 12:25:59 UTC 2014 - afaerber@suse.com - Copy the freshly built s390-ccw.img over to the location from which it is installed (bnc#893535) This was leading to previous patch backports not taking effect. - Let qemu-tools obsolete virt-utils package (bnc#893339) ------------------------------------------------------------------- Thu Jul 24 15:16:40 UTC 2014 - afaerber@suse.com - Updated patches after upstreaming (bnc#882008): 0092-module-Simplify-module_load.patch 0093-module-Don-t-complain-when-a-module.patch - Backported more s390x ccw boot/reset fixes (cf. bnc#812983): 0164-pc-bios-s390-ccw-virtio_load_direct.patch 0165-pc-bios-s390-ccw-do-a-subsystem-res.patch 0166-pc-bios-s390-ccw-fix-for-fragmented.patch 0167-pc-bios-s390-ccw-make-checkpatch-ha.patch 0168-pc-bios-s390-ccw-cleanup-and-enhanc.patch 0169-pc-bios-s390-ccw-handle-different-s.patch 0170-pc-bios-s390-ccw-store-proper-subsy.patch - Backported update_git.sh script extension from OBS: autogenerate .changes entries mentioning added/deleted patches ------------------------------------------------------------------- Mon Jul 7 22:17:43 UTC 2014 - agraf@suse.com - Add support for ppc64le KVM, including virtio and CAS support (fate#317763) - added patches: * 0094-spapr_nvram-Correct-max-nvram-size.patch * 0095-target-ppc-extract-register-length-.patch * 0096-target-ppc-gdbstub-allow-byte-swapp.patch * 0097-spapr_pci-Fix-number-of-returned-ve.patch * 0098-spapr_pci-fix-MSI-limit.patch * 0099-spapr-Add-support-for-time-base-off.patch * 0100-spapr-Add-ibm-chip-id-property-in-d.patch * 0101-target-ppc-Support-dump-for-little-.patch * 0102-target-ppc-Introduce-callback-for-i.patch * 0103-target-ppc-Set-the-correct-endianne.patch * 0104-target-ppc-Add-compat-CPU-option.patch * 0105-spapr-Move-SMT-related-properties-o.patch * 0106-target-ppc-Implement-compat-CPU-opt.patch * 0107-target-ppc-Define-Processor-Compati.patch * 0108-spapr-Add-ibm-client-architecture-s.patch * 0109-spapr-Rework-spapr_fixup_cpu_dt.patch * 0110-spapr-Limit-threads-per-core-accord.patch * 0111-spapr-Implement-processor-compatibi.patch * 0112-KVM-PPC-Enable-compatibility-mode.patch * 0113-kvm-make-one_reg-helpers-available-.patch * 0114-dump-Drop-pointless-error_is_set-Du.patch * 0115-dump-fill-in-the-flat-header-signat.patch * 0116-dump-simplify-write_start_flat_head.patch * 0117-dump-eliminate-DumpState.page_shift.patch * 0118-dump-eliminate-DumpState.page_size-.patch * 0119-dump-select-header-bitness-based-on.patch * 0120-dump-hoist-lzo_init-from-get_len_bu.patch * 0121-dump-simplify-get_len_buf_out.patch * 0122-dump-Make-DumpState-and-endian-conv.patch * 0123-linux-headers-update-linux-headers-.patch * 0124-target-ppc-Create-versionless-CPU-c.patch * 0125-target-ppc-Move-alias-lookup-after-.patch * 0126-target-ppc-Remove-redundant-POWER7-.patch * 0127-KVM-PPC-Expose-fixup-hcall-capabili.patch * 0128-PPC-spapr-Expose-hypervisor-node-in.patch * 0129-spapr_hcall-Split-h_set_mode.patch * 0130-spapr_hcall-Add-address-translation.patch * 0131-PPC-KVM-Make-pv-hcall-endian-agnost.patch * 0132-spapr_pci-Advertise-MSI-quota.patch * 0133-spapr-Add-qemu-boot-menu-property-t.patch * 0134-target-ppc-Add-support-for-POWER8-p.patch * 0135-spapr-Add-rtas_st_buffer-utility-fu.patch * 0136-spapr-Fix-RTAS-sysparm-DIAGNOSTICS_.patch * 0137-spapr-Add-RTAS-sysparm-UUID.patch * 0138-spapr-Add-RTAS-sysparm-SPLPAR-Chara.patch * 0139-virtio-net-byteswap-virtio-net-head.patch * 0140-virtio-serial-don-t-migrate-the-con.patch * 0141-virtio-introduce-device-specific-mi.patch * 0142-virtio-net-implement-per-device-mig.patch * 0143-virtio-blk-implement-per-device-mig.patch * 0144-virtio-serial-implement-per-device-.patch * 0145-virtio-balloon-implement-per-device.patch * 0146-virtio-rng-implement-per-device-mig.patch * 0147-virtio-add-subsections-to-the-migra.patch * 0148-exec-introduce-target_words_bigendi.patch * 0149-cpu-introduce-CPUClass-virtio_is_bi.patch * 0150-virtio-add-endian-ambivalent-suppor.patch * 0151-virtio-memory-accessors-for-endian-.patch * 0152-virtio-allow-byte-swapping-for-vrin.patch * 0153-virtio-net-use-virtio-wrappers-to-a.patch * 0154-virtio-balloon-use-virtio-wrappers-.patch * 0155-virtio-blk-use-virtio-wrappers-to-a.patch * 0156-virtio-scsi-use-virtio-wrappers-to-.patch * 0157-virtio-serial-bus-use-virtio-wrappe.patch * 0158-virtio-9p-use-virtio-wrappers-to-ac.patch * 0159-target-ppc-enable-virtio-endian-amb.patch * 0160-target-ppc-KVMPPC_H_CAS-fix-cpu-ver.patch * 0161-target-ppc-Add-pvr_match-callback.patch * 0162-target-ppc-Remove-POWER7-and-POWER8.patch * 0163-qemu-VGA-endian-swap-low-level-draw.patch ------------------------------------------------------------------- Thu Jul 3 15:38:51 UTC 2014 - brogers@suse.com - Avoid the reported error message about missing modules 0092-module-Simplify-module_load.patch 0093-module-Don-t-complain-when-a-module.patch ------------------------------------------------------------------- Wed Jul 2 17:06:57 UTC 2014 - brogers@suse.com - Move block-curl.so to new qemu-block-curl package, avoiding a dependency of qemu-tools on qemu for Xen (bnc#882008) ------------------------------------------------------------------- Mon Jun 30 17:39:26 UTC 2014 - brogers@suse.com - Backport patches in support of compressed, stream optimized vmdk format (fate#317741) 0089-qemu-img-Convert-by-cluster-size-if.patch 0090-vmdk-Implement-.bdrv_write_compress.patch 0091-vmdk-Implement-.bdrv_get_info.patch ------------------------------------------------------------------- Wed Jun 18 19:59:12 UTC 2014 - brogers@suse.com - Fix /dev/kvm permissions problem with package install and no reboot (bnc#867867) - Improve sample bridge script ------------------------------------------------------------------- Thu Jun 12 17:27:03 UTC 2014 - brogers@suse.com - Add code to validate pxe rom sizing for migration compatiblility - python-curses only needed in support of kvm_stat ------------------------------------------------------------------- Wed Jun 11 13:10:48 UTC 2014 - afaerber@suse.com - Reorder qemu-tools and qemu-guest-agent before the BIOSes This is needed to use QEMU's %version - backport from Factory ------------------------------------------------------------------- Sun Jun 1 23:08:47 UTC 2014 - brogers@suse.com - Only build the x86 firmware on x86, ensuring consistent binaries - remove un-needed pmtools BuildRequires ------------------------------------------------------------------- Fri May 30 17:01:54 UTC 2014 - brogers@suse.com - Fix vga related problem doing direct kernel boot for SLES 10 and SLES 11 guests (bnc#880625) vgabios-Make-sure-stdvga_list_modes-doesn-t-overrun-.patch ------------------------------------------------------------------- Sun May 25 02:12:22 UTC 2014 - brogers@suse.com - Tighten up specfile syntax and eliminate unneeded elements ------------------------------------------------------------------- Sat May 24 10:11:46 UTC 2014 - afaerber@suse.com - Probe vhost-net module on SLE11 (copied from SP3 package) ------------------------------------------------------------------- Wed May 21 17:44:21 UTC 2014 - brogers@suse.com - On s390, install kvm.conf to usr/lib/modules-load.d to cause the kvm kernel module to be loaded whenever the qemu package is installed, and set /dev/kvm permissions and group owner in post script (bnc#869026, bnc#875582) - Get kvm_stat from qemu sources instead of using a static copy ------------------------------------------------------------------ Mon May 19 16:20:45 UTC 2014 - afaerber@suse.com - Fix CVE-2013-4148 (bnc#864812) 0066-virtio-net-fix-buffer-overflow-on-i.patch - Fix CVE-2013-4149 (bnc#864649) 0086-virtio-net-out-of-bounds-buffer-wri.patch - Fix CVE-2013-4150 (bnc#864650) 0067-virtio-net-out-of-bounds-buffer-wri.patch - Fix CVE-2013-4151 (bnc#864653) 0068-virtio-out-of-bounds-buffer-write-o.patch - Fix CVE-2013-4526 (bnc#864671) 0069-ahci-fix-buffer-overrun-on-invalid-.patch - Fix CVE-2013-4527 (bnc#864673) 0070-hpet-fix-buffer-overrun-on-invalid-.patch - Fix CVE-2013-4529 (bnc#864678) 0071-hw-pci-pcie_aer.c-fix-buffer-overru.patch - Fix CVE-2013-4530 (bnc#864682) 0072-pl022-fix-buffer-overun-on-invalid-.patch - Fix CVE-2013-4531 (bnc#864796) 0073-vmstate-fix-buffer-overflow-in-targ.patch - Fix CVE-2013-4533 (bnc#864655) 0076-pxa2xx-avoid-buffer-overrun-on-inco.patch - Fix CVE-2013-4534 (bnc#864811) 0085-openpic-avoid-buffer-overrun-on-inc.patch - Fix CVE-2013-4535 / CVE-2013-4536 (bnc#864665) 0075-virtio-validate-num_sg-when-mapping.patch - Fix CVE-2013-4537 (bnc#864391) 0084-ssi-sd-fix-buffer-overrun-on-invali.patch - Fix CVE-2013-4538 (bnc#864769) 0077-ssd0323-fix-buffer-overun-on-invali.patch - Fix CVE-2013-4539 (bnc#864805) 0078-tsc210x-fix-buffer-overrun-on-inval.patch - Fix CVE-2013-4540 (bnc#864801) 0079-zaurus-fix-buffer-overrun-on-invali.patch - Fix CVE-2013-4541 (bnc#864802) 0082-usb-sanity-check-setup_index-setup_.patch - Fix CVE-2013-4542 (bnc#864804) 0080-virtio-scsi-fix-buffer-overrun-on-i.patch - Fix CVE-2013-6399 (bnc#864814) 0074-virtio-avoid-buffer-overrun-on-inco.patch - Fix CVE-2014-0182 (bnc#874788) 0087-virtio-validate-config_len-on-load.patch - Backported patch from stable branch (brogers): 0088-virtio-allow-mapping-up-to-max-queu.patch ------------------------------------------------------------------- Sat May 17 18:21:49 UTC 2014 - brogers@suse.com - Backported patches from stable branch: 0056-s390x-kvm-rework-KVM-synchronize-to.patch 0057-block-Prevent-coroutine-stack-overf.patch 0058-qdev-Fix-crash-by-validating-the-ob.patch 0059-acpi-fix-tables-for-no-hpet-configu.patch 0060-Revert-qapi-Clean-up-superfluous-nu.patch 0061-target-i386-Preserve-the-Z-bit-for-.patch 0062-pci-assign-limit-of-msix-vectors.patch 0063-target-i386-fix-set-of-registers-ze.patch ------------------------------------------------------------------- Tue May 13 20:06:45 UTC 2014 - brogers@suse.com - ABI fixes for ppc64le TCG 0055-tcg-ppc64-Support-the-ELFv2-ABI.patch - Widen archs and versions packages can be build for - Split 60-kvm.rules into 60-kvm.rules and 60-kvm.x86.rules - misc spec file streamlining ------------------------------------------------------------------- Thu May 8 19:45:20 UTC 2014 - brogers@suse.com - Add --disable-stack-protector configure option, which removes the -fstack-protector-all option leaving just the optflags provided -fstack-protector option for building QEMU. ------------------------------------------------------------------- Wed May 7 18:06:31 UTC 2014 - brogers@suse.com - Fix misspelled tag in qemu-ga.service file ------------------------------------------------------------------- Thu May 1 22:36:42 UTC 2014 - brogers@suse.com - qemu-guest-agent: add udev rule and systemd service (bnc#875870) - Increase socket timeout for qtest to avoid make check issues - Add ExcludeArch: s390 to spec file, as we don't support that arch - Backport some additional seccomp whitelist patches - Move qemu-ifup script to qemu package - Make clear in kvm-supported.txt that emulated scsi is supported - Fix gtk interface when used from SLE11 (bnc#874413) 0051-seccomp-add-timerfd_create-and-time.patch 0052-seccomp-add-shmctl-mlock-and-munloc.patch 0053-gtk-Add-handling-for-the-xfree86-ke.patch 0054-qtest-Increase-socket-timeout-to-ac.patch ------------------------------------------------------------------- Thu Apr 17 17:35:55 UTC 2014 - afaerber@suse.com - Attempt to debug or solve occasional qtest fd assertions 0048-qtest-Assure-that-init_socket-s-lis.patch 0049-qtest-Add-error-reporting-to-socket.patch 0050-qtest-Be-paranoid-about-accept-addr.patch ------------------------------------------------------------------- Thu Apr 17 13:41:58 UTC 2014 - afaerber@suse.com - Update to v2.0.0: cf. http://wiki.qemu-project.org/ChangeLog/2.0 * Update update_git.sh script accordingly ------------------------------------------------------------------- Wed Apr 16 20:10:19 UTC 2014 - brogers@suse.com - Do /dev/kvm permission and ownership tweaks on s390x (bnc#869026) - Get SeaBIOS version from QEMU tarball ------------------------------------------------------------------- Mon Apr 14 17:25:05 UTC 2014 - afaerber@suse.com - Update to v2.0.0-rc3: cf. http://wiki.qemu-project.org/ChangeLog/2.0 * Update update_git.sh script accordingly * Addresses CVE-2014-0150 (bnc#873235), CVE-2013-4544 (bnc#873613) ------------------------------------------------------------------- Mon Apr 14 03:44:30 UTC 2014 - brogers@suse.com - Update to v2.0.0-rc2: cf. http://wiki.qemu-project.org/ChangeLog/2.0 * Update update_git.sh script accordingly * Resolves Gtk mouse issues (bnc#849587) * Drop 0047-tests-Disable-endianness-test-for-p.patch ------------------------------------------------------------------- Thu Apr 10 14:22:47 UTC 2014 - afaerber@suse.com - Workaround for prep endianness-test breakage on Big Endian s390x 0047-tests-Disable-endianness-test-for-p.patch - Avoid running qom-test twice for some targets 0048-tests-Don-t-run-qom-test-twice.patch - Fix update_git.sh script * Do not rely on -C option that's unavailable on 13.1 * Make temporary directories more unique ------------------------------------------------------------------- Fri Apr 4 18:23:27 UTC 2014 - brogers@suse.com - Updated to v2.0.0-rc1: cf. http://wiki.qemu-project.org/ChangeLog/2.0 * Update update_git.sh script accordingly * Includes fixes for bnc#869746 and bnc#871302 * Addresses CVE-2014-0142, CVE-2014-0143, CVE-2014-0144, CVE-2014-0145, CVE-2014-0146, CVE-2014-0147 (bnc#870439) - Further tweaks to update_git.sh ------------------------------------------------------------------- Tue Apr 1 15:54:59 UTC 2014 - afaerber@suse.com - 0037-roms-Build-vgabios.bin.patch: Drop since no longer needed ------------------------------------------------------------------- Tue Apr 1 14:58:54 UTC 2014 - afaerber@suse.com - Add _constraints to fix ppc64le build in SUSE:SLE-12:GA running out of disk space due to addition of debug infos ------------------------------------------------------------------- Tue Apr 1 12:48:57 UTC 2014 - afaerber@suse.com - Fix update_git.sh script to not duplicate .patch in filename ------------------------------------------------------------------- Mon Mar 31 13:18:12 UTC 2014 - brogers@suse.com - Add 0049-qemu-img-add-nocow-option.patch.patch: Adds a configurable nocow flag for image files for better btrfs compatability and performance (FATE#315125) ------------------------------------------------------------------- Fri Mar 28 17:03:26 UTC 2014 - brogers@suse.com - Add 0048-spice-input-Fix-absolute-mouse-y-co.patch: Fixes spice mouse cursor mismatch (bnc#869746) ------------------------------------------------------------------- Fri Mar 28 16:42:27 UTC 2014 - afaerber@suse.com - Disable make check for ppc64le due to acpi-test failure. The breakage is caused by TCG emulation not supporting ppc64le yet, which shouldn't block testing KVM on ppc64le. ------------------------------------------------------------------- Wed Mar 26 16:01:20 UTC 2014 - brogers@suse.com - Tidy up qemu.spec a bit: white space, line length, use macros as appropriate - Improve update_git.sh to not change files in OBS if the file remains unchanged ------------------------------------------------------------------- Wed Mar 26 14:38:19 UTC 2014 - afaerber@suse.com - 0046-s390-Remove-legacy-s390-virtio-mach.patch: Fix lack of default machine after update to v2.0.0-rc0 ------------------------------------------------------------------- Mon Mar 24 17:23:22 UTC 2014 - afaerber@suse.com - Fix installation location of modules ------------------------------------------------------------------- Thu Mar 20 01:52:09 UTC 2014 - afaerber@suse.com - Enable libvixl-based disassembler support for aarch64 ------------------------------------------------------------------- Tue Mar 18 19:18:04 UTC 2014 - brogers@suse.com - Reenable usb-redir configure option, since spice-gtk is built assuming it is available. - Fix wrong executable reference in /usr/bin/qemu-kvm on s390x (bnc#869021) ------------------------------------------------------------------- Mon Mar 17 19:29:16 UTC 2014 - brogers@suse.com - Update qemu-vgabios to use seavgabios sources, which is also the default vgabios used upstream now. Includes a version change - Correct the version for qemu-seabios ------------------------------------------------------------------- Mon Mar 17 18:23:49 UTC 2014 - afaerber@suse.com - Extend update_git.sh script to update the QEMU package version * Enable it in qemu.spec.in, replaces 2.0.rc0 with 1.7.90 ------------------------------------------------------------------- Mon Mar 17 15:29:27 UTC 2014 - afaerber@suse.com - Restore 0046-s390-Remove-legacy-s390-virtio-mach.patch * 0046-s390-Default-virtio-blk-to-ccw.patc.patch becomes 0047-s390-Default-virtio-blk-to-ccw.patc.patch ------------------------------------------------------------------- Sun Mar 16 03:43:27 UTC 2014 - brogers@suse.com - Update to v2.0.0-rc0: See http://wiki.qemu-project.org/ChangeLog/2.0 * Update kvm-supported.txt to match v2.0 features * Adapted update_git.sh accordingly * Drop 0012-linux-user-Ignore-timer_create-sysc.patch * Drop 0040-linux-user-Implement-BLKPG-ioctl.pa.patch * Drop 0041-linux-user-sync-syscall-numbers-upt.patch * Drop 0050-s390-Remove-legacy-s390-virtio-mach.patch - Enable modules configure option - Enable virtio-blk-data-plane configure option - Disable usb-redir configure option ------------------------------------------------------------------- Thu Mar 6 13:54:45 UTC 2014 - brogers@suse.com - Make qemu-kvm arch specific ------------------------------------------------------------------- Fri Feb 28 17:38:53 UTC 2014 - afaerber@suse.com - Split off sub-packages for KVM architectures * On top of Factory, also move target-x86_64.conf to qemu-x86 - Suggest qemu-lang package - Decouple qemu-kvm package from qemu-lang - Use --localstatedir=/var for qemu-ga (brogers) ------------------------------------------------------------------- Tue Feb 18 22:36:30 UTC 2014 - brogers@suse.com - Enable tpm config option (FATE#315467) - Re-enable usb passthrough since recent libusb is now available ------------------------------------------------------------------- Fri Feb 14 18:22:31 UTC 2014 - brogers@suse.com - Enable supported seccomp feature on x86 architecture - Fix improperly formatted wrapper script (bnc#864094) ------------------------------------------------------------------- Fri Feb 14 13:53:03 UTC 2014 - afaerber@suse.com - Enable make check * 0050-s390-Remove-legacy-s390-virtio-mach.patch: Extend to qom-test * Drop 0045-Increase-default-RAM-size-to-512-Mi.patch It differs from upstream and breaks fw_cfg-test. ------------------------------------------------------------------- Thu Feb 13 23:14:29 UTC 2014 - brogers@suse.com - Use Provides/Obsoletes as means to transition kvm users to the qemu-kvm package ------------------------------------------------------------------- Wed Feb 12 23:50:30 UTC 2014 - brogers@suse.com - Migrate kvm package contents to a new qemu-kvm sub-package, and move the kvm related udev rules to the qemu package. (The kvm package is being retired). - Update support document to represent 1.7.0 and SLES 12 (not done) Add qemu-ifup Add qemu-kvm.1.gz Add kvm_stat Add 60-kvm.rules Add 80-kvm.rules Add kvm-supported.txt ------------------------------------------------------------------- Wed Feb 12 16:59:10 UTC 2014 - afaerber@suse.com - Added patches forward-ported from SLE11 SP3: Add 0043-Raise-soft-address-space-limit-to-h.patch Add 0044-increase-x86_64-physical-bits-to-42.patch Add 0045-Increase-default-RAM-size-to-512-Mi.patch Add 0046-vnc-provide-fake-color-map.patch.patch Add 0047-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch Add 0048-i8254-Fix-migration-from-SLE11-SP2..patch Add 0049-acpi_piix4-Fix-migration-from-SLE11.patch Add 0050-s390-Default-virtio-blk-to-ccw.patc.patch Add 0051-s390-Remove-legacy-s390-virtio-mach.patch ------------------------------------------------------------------- Thu Feb 6 17:53:54 UTC 2014 - afaerber@suse.com - Update update_git.sh and qemu.spec.in to point to SUSE rather than openSUSE Git repository ------------------------------------------------------------------- Mon Feb 3 15:54:06 UTC 2014 - afaerber@suse.de - Implement discard support for xen_disk (olh) (fate#316071) 0042-xen_disk-add-discard-support.patch.patch ------------------------------------------------------------------- Fri Jan 24 11:03:58 UTC 2014 - afaerber@suse.de - Simplified VMDK SCSI support handling (backport from 13.1/v1.6.2) * Increases the number of heads for SCSI from 16 to 255 ------------------------------------------------------------------- Fri Jan 17 17:34:57 UTC 2014 - afaerber@suse.de - Bump copyright in qemu.spec.in - Use vte-devel instead of vte2-devel and force using Gtk3, reported by Takashi and Dirk (bnc#840607, bnc#849587). ------------------------------------------------------------------- Mon Jan 13 14:24:24 UTC 2014 - coolo@suse.com - xen dropped support for i586, so don't buildrequire it ------------------------------------------------------------------- Thu Jan 2 19:01:51 UTC 2014 - afaerber@suse.de - Update version number of SeaBIOS, spotted by BdMdesigN ------------------------------------------------------------------- Fri Dec 6 22:21:50 UTC 2013 - afaerber@suse.de - Update to v1.7.0: See http://wiki.qemu-project.org/ChangeLog/1.7 * Adapted update_git.sh accordingly * Dropped --enable-mixemu (no longer available) * Added a work around for roms/Makefile issue * patch 0038-gdbstub-Fix-gdb_register_coprocesso.patch dropped ------------------------------------------------------------------- Wed Oct 9 16:23:56 UTC 2013 - dmueller@suse.com - use --enable-pie to fix arm build ------------------------------------------------------------------- Tue Oct 8 17:05:02 UTC 2013 - afaerber@suse.de - Undo workaround for sasl - fixed in Factory ------------------------------------------------------------------- Wed Oct 2 15:52:42 UTC 2013 - afaerber@suse.de - Work around Factory sasl breakage by allowing build w/o vnc-sasl - Move build_and_copy_vgabios_bin.patch to Git patch queue * Clearly mark in-.spec patch queue as for roms/ipxe/ only - Synchronized qemu.spec.in from qemu.spec: * Added ipxe-build-Avoid-strict-aliasing-warning.patch * Modified SeaBIOS summary * Added Conflicts for firmware subpackages * Dropped %dir - Add patch enabling PIE support for ppc/ppc64 (k0da) ------------------------------------------------------------------- Fri Sep 13 11:14:45 UTC 2013 - brogers@suse.com - Build x86 firmware from tarball source. The firmware components produced are equivalent to the upstream provided binary blobs currently being used. They are delivered in noarch subpackages as follows (addresses bnc#830002): * qemu-seabios v1.7.2.2 * qemu-vgabios v0.6c * qemu-sgabios v8 (svn rev 8) * qemu-ipxe v1.0.0 - Add following patches to enable x86 firmware to build: ipxe-build-Work-around-bug-in-gcc-4.8.patch ipxe-zbin-Fix-size-used-for-memset-in-al.patch build_and_copy_vgabios_bin.patch ipxe-build-Avoid-strict-aliasing-warning.patch ------------------------------------------------------------------- Mon Aug 26 06:40:22 UTC 2013 - rob.verduijn@gmail.com - Enabled usb-redirection * Fixes starting VMs in gnome-boxes (bnc#839703) ------------------------------------------------------------------- Sat Aug 17 13:43:13 UTC 2013 - afaerber@suse.de - Enable Xen support to allow testing our QEMU in place of Xen's This prepares for consolidating QEMU packaging further. ------------------------------------------------------------------- Sat Aug 17 12:12:57 UTC 2013 - afaerber@suse.de - Fix gdbstub for arm/m68k/ppc guests (from pending upstream pull) ------------------------------------------------------------------- Fri Aug 16 23:36:12 UTC 2013 - afaerber@suse.de - Update to v1.6.0: cf. http://wiki.qemu.org/ChangeLog/1.6 * Adapt update_git.sh script accordingly ------------------------------------------------------------------- Tue Aug 13 14:36:53 UTC 2013 - afaerber@suse.de - Update to v1.6.0-rc3: cf. http://wiki.qemu.org/ChangeLog/1.6 * Adapt update_git.sh script accordingly - Changed back versioning scheme to 1.6.0rcX (saschpe, brogers). ------------------------------------------------------------------- Fri Aug 9 13:55:46 UTC 2013 - afaerber@suse.de - Update to v1.6.0-rc2: cf. http://wiki.qemu.org/ChangeLog/1.6 * Adapt update_git.sh script accordingly - Changed version from 1.6.0rcX to 1.5.9X (reported by lnussel) ------------------------------------------------------------------- Fri Aug 2 12:43:52 UTC 2013 - afaerber@suse.de - Update to v1.6.0-rc1: cf. http://wiki.qemu.org/ChangeLog/1.6 * Adapt update_git.sh script accordingly ------------------------------------------------------------------- Thu Aug 1 15:34:28 UTC 2013 - afaerber@suse.de - Use libfdt build dependency not just for ppc. QEMU 1.6 needs it for ppc, arm and microblaze guests and uses a bundled copy if one of those targets is built and the system does not have a compatible libfdt. ------------------------------------------------------------------- Tue Jul 30 04:58:55 UTC 2013 - afaerber@suse.de - Update to v1.6.0-rc0: cf. http://wiki.qemu.org/ChangeLog/1.6 * Fixes build against recent dtc (SLE_11_SP2 ppc64 w/ Base:System) * Includes Gtk patches for bnc#830459 * Adapt update_git.sh script accordingly ------------------------------------------------------------------- Mon Jul 22 21:34:00 UTC 2013 - brogers@suse.com - Fix segfault that occurs from using -vga qxl (bnc#830459) ------------------------------------------------------------------- Tue Jun 18 13:58:35 UTC 2013 - afaerber@suse.de - Clarify through spec file comments that the patch queue is auto-generated through update_git.sh. Please do not submit SRs that bypass our patch handling. ------------------------------------------------------------------- Sat May 25 15:50:49 UTC 2013 - afaerber@suse.de - Really enable pulseaudio and oss support (bnc#737070) - Amend licenses list with GPL-2.0 (adopted from kvm package) - Be explicit in enabling features our packaging relies on - Disable stripping at QEMU level - Use %optflags rather than $QEMU_OPT_FLAGS ------------------------------------------------------------------- Fri May 24 19:57:35 UTC 2013 - afaerber@suse.de - Move /emul/ia32-linux to qemu-linux-user ------------------------------------------------------------------- Fri May 24 17:11:36 UTC 2013 - afaerber@suse.de - Drop dependency on bison * Reorder BuildRequires alphabetically - Fix summary of qemu-lang sub-package - Drop post-build-checks suppression (qemu-linux-user only) ------------------------------------------------------------------- Fri May 24 14:31:59 UTC 2013 - afaerber@suse.de - Enable brlapi as done for kvm package ------------------------------------------------------------------- Fri May 24 12:33:23 UTC 2013 - afaerber@suse.de - Use %{?_smp_mflags} rather than %{?jobs:-j%jobs} ------------------------------------------------------------------- Thu May 23 15:08:42 UTC 2013 - afaerber@suse.de - Extend virtfs typedef workaround to ppc64 for SLE_11_SP2 ------------------------------------------------------------------- Tue May 21 21:13:04 UTC 2013 - afaerber@suse.de - Split off qemu-linux-user package into separate .spec file. * Simplified %build and %install sections * Dropped *-static dependencies ------------------------------------------------------------------- Mon May 20 21:14:08 UTC 2013 - afaerber@suse.de - Update to v1.5.0 final: Cf. http://wiki.qemu.org/ChangeLog/1.5 * Adapt update_git.sh accordingly * Add BuildRequires for gtk2/3 and vte2 to enable new frontend * Place translations into new qemu-lang package * Really enable SPICE support from 11.4 in configure, too ------------------------------------------------------------------- Fri May 17 13:47:21 UTC 2013 - afaerber@suse.de - Add BuildRequires for pixman, to avoid using internal version that fails to build on ppc ------------------------------------------------------------------- Thu May 16 10:34:08 UTC 2013 - afaerber@suse.de - Update to v1.5.0-rc2: Cf. http://wiki.qemu.org/ChangeLog/1.5 * Adapt update_git.sh accordingly - Add patch by brogers to fix SLE 11 SP2 build (from kvm package) ------------------------------------------------------------------- Tue May 14 13:02:18 UTC 2013 - afaerber@suse.de - Update to v1.5.0-rc1: Cf. http://wiki.qemu.org/ChangeLog/1.5 * Adapt update_git.sh accordingly * TODO file no longer exists, don't try to package it * Package qemu-mips64{,el} ------------------------------------------------------------------- Tue May 14 14:51:20 CEST 2013 - ohering@suse.de - Enable spice support starting from 11.4 ------------------------------------------------------------------- Tue May 7 19:56:40 UTC 2013 - afaerber@suse.de - Update to v1.5.0-rc0: Cf. http://wiki.qemu.org/ChangeLog/1.5 * Adapt update_git.sh script * Audio cards are now all enabled by default ------------------------------------------------------------------- Wed Apr 24 17:15:04 UTC 2013 - afaerber@suse.de - Enable pa and oss audio drivers, as in kvm package (bnc#737070) - Enable hda audio card, as done in kvm package (bnc#801794) ------------------------------------------------------------------- Mon Apr 22 18:27:18 UTC 2013 - dimstar@opensuse.org - Add explicit alsa-devel BuildRequires: this used to (wrongly) be pulled in by libSDL-devel. ------------------------------------------------------------------- Sun Feb 17 11:15:39 UTC 2013 - afaerber@suse.de - Update licenses from new format_spec_file ------------------------------------------------------------------- Sat Feb 16 12:13:58 UTC 2013 - afaerber@suse.de - Update to v1.4.0: See http://wiki.qemu.org/ChangeLog/1.4 * Adapt update_git.sh accordingly ------------------------------------------------------------------- Sun Feb 10 14:27:36 UTC 2013 - afaerber@suse.de - Update to v1.4.0-rc1: See http://wiki.qemu.org/ChangeLog/1.4 * Adapt update_git.sh accordingly - Update update_git.sh to reference github.com/openSUSE/qemu.git ------------------------------------------------------------------- Thu Dec 13 13:30:57 UTC 2012 - agraf@suse.com - linux-user: fix lseek with SEEK_END ------------------------------------------------------------------- Thu Dec 13 10:47:52 UTC 2012 - agraf@suse.com - Cherry pick patches from qemu-kvm into the qemu package: - 0033-Add-support-for-DictZip-enabled-gzi.patch - 0034-Add-tar-container-format.patch.patch - 0035-Legacy-Patch-kvm-qemu-preXX-dictzip.patch - 0036-Legacy-Patch-kvm-qemu-preXX-report-.patch - 0037-console-add-question-mark-escape-op.patch - 0038-Make-char-muxer-more-robust-wrt-sma.patch ------------------------------------------------------------------- Wed Dec 5 13:25:31 UTC 2012 - afaerber@suse.de - Revert memory size constraint, the workaround patch got applied ------------------------------------------------------------------- Wed Dec 5 10:37:14 UTC 2012 - afaerber@suse.de - Update to v1.3.0: see http://wiki.qemu.org/ChangeLog/1.3 * Update update_git.sh script accordingly ------------------------------------------------------------------- Wed Nov 28 12:26:39 UTC 2012 - afaerber@suse.de - Replace -fno-gcse patch with v3 ------------------------------------------------------------------- Tue Nov 27 16:34:29 UTC 2012 - afaerber@suse.de - Add patch to workaround GCC PR55489 via -fno-gcse, another step to avoid builds failing with out-of-memory ------------------------------------------------------------------- Tue Nov 27 15:56:07 UTC 2012 - afaerber@suse.de - Add _constraints to request adequate memory to succeed building ------------------------------------------------------------------- Tue Nov 27 05:16:13 UTC 2012 - afaerber@suse.de - Update to v1.3.0-rc1: see http://wiki.qemu.org/ChangeLog/1.3 * Update update_git.sh accordingly ------------------------------------------------------------------- Tue Nov 20 16:46:38 UTC 2012 - afaerber@suse.de - Update to v1.3.0-rc0: see http://wiki.qemu.org/ChangeLog/1.3 * Update update_git.sh accordingly * Disable SPICE for 11.4 since it can no longer be built lacking pyparsing ------------------------------------------------------------------- Tue Oct 10 18:14:59 UTC 2012 - agraf@suse.com - use ulong for syscall parameters. fixes lseek with big files ------------------------------------------------------------------- Tue Oct 10 17:16:20 UTC 2012 - agraf@suse.com - Add more block ioctl handlers for kiwi ------------------------------------------------------------------- Tue Oct 9 19:55:32 UTC 2012 - afaerber@suse.de - Sync qemu.spec.in file, please don't forget! ------------------------------------------------------------------- Fri Sep 14 16:22:01 UTC 2012 - schwab@linux-m68k.org - Don't strip binaries ------------------------------------------------------------------- Thu Sep 13 13:12:52 UTC 2012 - idonmez@suse.com - Add explicit dependency on makeinfo for manpage/doc generation ------------------------------------------------------------------- Fri Sep 7 07:04:08 UTC 2012 - vuntz@suse.com - Add libcap-devel BuildRequires since it's needed to enable VirtFS support. - Add libcap-ng-devel BuildRequires to be able to drop privileges in qemu-bridge-helper. - Add libjpeg-devel and libpng-devel BuildRequires to enable VNC jpeg and png support. - Pass --enable-virtfs to configure to detect changes that will cause VirtFS support to not be built. ------------------------------------------------------------------- Wed Sep 5 17:39:17 UTC 2012 - afaerber@suse.de - update to v1.2.0: see http://wiki.qemu.org/ChangeLog/1.2 * adapt update_git.sh script * this includes the fix for CVE-2012-3515 ------------------------------------------------------------------- Wed Sep 5 10:26:38 UTC 2012 - afaerber@suse.de - add bounds checks in console VT100 emulation (bnc#777084, CVE-2012-3515) ------------------------------------------------------------------- Wed Sep 5 09:57:44 UTC 2012 - afaerber@suse.de - update to v1.2.0-rc3: http://wiki.qemu.org/ChangeLog/1.2 * adapt update_git.sh script - add two patches from kvm for SUSE Studio, forwarded by Dinar: * add -nooutgoing option for slirp networking * add allowed-connections= and password-file= options for VNC ------------------------------------------------------------------- Tue Aug 28 15:58:56 UTC 2012 - afaerber@suse.de - update to v1.2.0-rc1: http://wiki.qemu.org/ChangeLog/1.2 * adapt update_git.sh script ------------------------------------------------------------------- Tue Aug 21 12:21:49 UTC 2012 - agraf@suse.com - fix getdent in linux-user - fix statfs in linux-user - disable FIEMAP support in linux-user ------------------------------------------------------------------- Tue Aug 21 08:21:20 UTC 2012 - agraf@suse.com - add support for FS_IOC_[G|S]ETFLAG ioctls ------------------------------------------------------------------- Fri Aug 17 14:30:28 UTC 2012 - afaerber@suse.de - update to v1.2.0-rc0: http://wiki.qemu.org/ChangeLog/1.2 * adapt update_git.sh script * package new qemu-or32 executable into linux-user ------------------------------------------------------------------- Wed Aug 15 20:50:02 UTC 2012 - dmueller@suse.com - avoid installing qemu on a qemu build ------------------------------------------------------------------- Tue Jul 31 09:50:25 UTC 2012 - agraf@suse.com - add hijack for /proc/cpuinfo - add compatibility patch for glibc 2.16 (Thanks AJ!) ------------------------------------------------------------------- Wed Jul 11 21:16:34 UTC 2012 - agraf@suse.com - fix segfault even better ------------------------------------------------------------------- Wed Jul 11 14:52:02 UTC 2012 - agraf@suse.com - linux-user: improve locking even across tb flushes ------------------------------------------------------------------- Tue Jul 10 18:43:31 UTC 2012 - agraf@suse.com - linux-user: pin multi-threaded applications to a single host cpu ------------------------------------------------------------------- Tue Jul 10 16:42:54 UTC 2012 - agraf@suse.com - linux-user: improve lock ------------------------------------------------------------------- Thu Jul 5 15:37:05 UTC 2012 - agraf@suse.com - linux-user: add tcg lock for multi-threaded guest programs ------------------------------------------------------------------- Wed Jun 25 19:29:05 UTC 2012 - afaerber@suse.de - include qemu-img and qemu-nbd in qemu-tools package ------------------------------------------------------------------- Wed Jun 25 18:30:54 UTC 2012 - afaerber@suse.de - add qemu-guest-agent package ------------------------------------------------------------------- Mon Jun 25 17:40:36 UTC 2012 - agraf@suse.com - add fix for segv in linux-user (fixes java) ------------------------------------------------------------------- Tue Jun 19 16:06:52 UTC 2012 - afaerber@suse.de - revert LIBRARY_PATH patch by Alex ------------------------------------------------------------------- Mon Jun 18 12:27:56 UTC 2012 - afaerber@suse.de - add patch by Alex to force gcc being emulated for LIBRARY_PATH ------------------------------------------------------------------- Mon Jun 18 09:06:41 UTC 2012 - dvaleev@suse.com - add libfdt1 to buildrequires on ppc ------------------------------------------------------------------- Thu Jun 14 14:39:57 UTC 2012 - afaerber@suse.de - revert qemu-bridge-helper mode change (cf. BNC#765948) ------------------------------------------------------------------- Mon Jun 13 13:44:28 UTC 2012 - brogers@suse.com - don't use permissions.d ------------------------------------------------------------------- Wed Jun 13 08:19:01 UTC 2012 - agraf@suse.com - Add fix for bogus losetup ioctl to not warn us about it ------------------------------------------------------------------- Sat Jun 9 19:09:39 UTC 2012 - brogers@suse.com - Set up bridge helper as a setuid executable ------------------------------------------------------------------- Sat Jun 9 12:17:45 UTC 2012 - afaerber@suse.de - Add patch for specifying --libexecdir * Fixes having to specify the path to qemu-bridge-helper manually - Drop superfluous `make qemu-img` - Move qemu-bridge-helper to its own subpackage, to share with KVM ------------------------------------------------------------------- Tue Jun 5 13:25:43 UTC 2012 - afaerber@suse.de - Update to v1.1.0: see http://wiki.qemu.org/ChangeLog/1.1 * Adapt update_git.sh script to new tag ------------------------------------------------------------------- Fri Jun 1 13:22:09 UTC 2012 - afaerber@suse.de - Update to v1.1.0-rc4: see http://wiki.qemu.org/ChangeLog/1.1 * Adapt update_git.sh script to new tag ------------------------------------------------------------------- Thu May 31 17:37:26 UTC 2012 - agraf@suse.com - fix /proc/self/maps faking with secondary threads ------------------------------------------------------------------- Wed May 30 20:19:05 CEST 2012 - agraf@suse.de - revert commit a84fac1426 to fix automoc4 for arm ------------------------------------------------------------------- Tue May 29 15:52:47 UTC 2012 - agraf@suse.com - remove manual interp prefix, which made all linux-user binaries point to an i386 LD_PREFIX path ------------------------------------------------------------------- Tue May 29 15:34:55 UTC 2012 - agraf@suse.com - add patch to fix building of go (swi in thumb ignores imm) ------------------------------------------------------------------- Tue May 22 16:39:24 UTC 2012 - afaerber@suse.de - Update to v1.1.0-rc3; see http://wiki.qemu.org/ChangeLog/1.1 * Adapt update_git.sh script to new tag ------------------------------------------------------------------- Thu May 17 17:40:19 UTC 2012 - afaerber@suse.de - Update to v1.1.0-rc2; see http://wiki.qemu.org/ChangeLog/1.1 * Adapt update_git.sh script to new tag ------------------------------------------------------------------- Wed May 16 01:29:02 UTC 2012 - afaerber@suse.de - Remove workaround for forcing cURL detection ------------------------------------------------------------------- Sun May 13 15:39:12 UTC 2012 - afaerber@suse.de - Update to v1.1-rc1: see http://wiki.qemu.org/ChangeLog/1.1 * Add workaround for 11.4: add -lrt after -lglib-2.0 - Adapt update_git.sh script to new tag ------------------------------------------------------------------- Tue May 8 00:15:18 UTC 2012 - afaerber@suse.de - Update to v1.1-rc0; see http://wiki.qemu.org/ChangeLog/1.1 * Do not try to mv qemu, the executable is gone, there's a dir now * Do not try to mv */qemu-*, there's a pc-bios/qemu-icon.bmp * Be more specific in temporary copying of files to dynamic/ * Drop duplicate %_bindir/qemu_binfmt_misc.sh, only in sbin now * Use dynamic version of new executable qemu-bridge-helper - Update update_git.sh script to pull patches from suse-1.1 branch ------------------------------------------------------------------- Mon May 7 19:49:40 UTC 2012 - afaerber@suse.de - Update URL to project homepage ------------------------------------------------------------------- Mon May 7 10:01:52 UTC 2012 - agraf@suse.com - compile fixes for ppc64abi32 - fix update_fit.sh script if wc -c is 40 - fix stale tbs after mmap ------------------------------------------------------------------- Wed Mar 7 15:16:16 UTC 2012 - agraf@suse.com - cut off patch file names after 40 bytes, support older git versions for update_git.sh ------------------------------------------------------------------- Mon Mar 5 01:31:42 UTC 2012 - agraf@suse.com - resolve VMAs downwards, fixes arm git build for real ------------------------------------------------------------------- Sat Mar 3 23:27:14 UTC 2012 - agraf@suse.com - update update_git.sh for 1.0.1 - add fixes for reserved_va mmap(NULL) case, fixes git build on arm ------------------------------------------------------------------- Tue Feb 28 11:49:55 UTC 2012 - idonmez@suse.com - Enable spice support ------------------------------------------------------------------- Wed Feb 22 23:04:48 UTC 2012 - brogers@suse.com - update to latest stable release: 1.0.1. For changes see: http://wiki.qemu.org/ChangeLog/1.0 ------------------------------------------------------------------- Mon Feb 6 22:24:27 UTC 2012 - brogers@suse.com - avoid buffer overflow in e1000 device emulation (bnc#740165) ------------------------------------------------------------------- Mon Feb 6 19:29:33 UTC 2012 - agraf@suse.de - qemu-user: fix fallocate ------------------------------------------------------------------- Fri Feb 3 11:49:24 UTC 2012 - agraf@suse.de - qemu-user: fix previous patch ------------------------------------------------------------------- Thu Feb 2 15:28:42 UTC 2012 - agraf@suse.de - qemu-user: add host binary support for binfmt ------------------------------------------------------------------- Thu Feb 2 00:41:21 UTC 2012 - agraf@suse.de - qemu-user: add fix for /proc/self/maps to only show mappable regions ------------------------------------------------------------------- Wed Feb 1 23:48:53 UTC 2012 - agraf@suse.de - qemu-user: add wrapper for BLKBSZGET ------------------------------------------------------------------- Tue Jan 31 21:36:02 UTC 2012 - agraf@suse.de - qemu-user: add fix for deadloop with ulimit constraints - qemu-user: add device mapper and loopback ioctls, enabling kpatkx ------------------------------------------------------------------- Tue Jan 10 16:08:35 UTC 2012 - agraf@suse.de - backport all ppc-1.0 stable patches to our package - add fix for PPC HV KVM on 3.1 ------------------------------------------------------------------- Tue Jan 10 15:26:21 UTC 2012 - agraf@suse.de - add fix for PPC in HV KVM mode ------------------------------------------------------------------- Thu Jan 6 01:18:00 UTC 2012 - agraf@suse.de - add workaround for KVM on PPC to support hugetlbfs - add upstream patches to fake $0 in /proc/self/maps (fixes ps) ------------------------------------------------------------------- Wed Dec 14 00:16:28 UTC 2011 - agraf@suse.com - add update_git.sh to simplify maintenance of the tree - use -R automatically in linux-user to gain more address space - drop MAP_32BIT patch (deprecated by the one above) ------------------------------------------------------------------- Mon Dec 12 22:05:24 CET 2011 - agraf@suse.com - add linker patch for ppc hosts ------------------------------------------------------------------- Mon Dec 12 20:55:12 UTC 2011 - agraf@suse.com - remove exclusivearch - we should be able to build everywhere! ------------------------------------------------------------------- Sun Dec 11 03:12:05 UTC 2011 - agraf@suse.com - fix compilation for 11.4 ------------------------------------------------------------------- Sun Dec 11 03:07:39 UTC 2011 - agraf@suse.com - fix compilation on sle11 - add %fdupes for duplicate file checking ------------------------------------------------------------------- Sun Dec 11 00:36:35 UTC 2011 - agraf@suse.com - update to 1.0 from upstream. for changelogs please see: - 0.14 -> 0.15: http://wiki.qemu.org/ChangeLog/0.15 - 0.15 -> 1.0: http://wiki.qemu.org/ChangeLog/1.0 - the binary "qemu" is now called qemu-system-i386 ------------------------------------------------------------------- Tue Nov 8 14:53:19 UTC 2011 - agraf@suse.com - only ignore specific timer_create syscall, no all of them ------------------------------------------------------------------- Sun Nov 6 14:33:42 UTC 2011 - agraf@suse.com - don't print out unsupported syscalls but rather silently ignore them - some programs catch stderr and get confused ------------------------------------------------------------------- Thu Nov 3 18:48:47 UTC 2011 - adrian@suse.de - add a number of patches to fake /proc entries (from Alex) ------------------------------------------------------------------- Fri Oct 28 08:55:39 UTC 2011 - adrian@suse.de - split linux-user binaries into qemu-linux-user package (this static package can be used in cross build in OBS) ------------------------------------------------------------------- Tue Oct 18 07:02:45 UTC 2011 - adrian@suse.de - add xattr support for openSUSE 12.1 - added syscall numbers to fix prlimit64 support (from upstream) ------------------------------------------------------------------- Wed Oct 5 12:00:34 UTC 2011 - joop.boonen@opensuse.org - Fixed glibc arm build issue according to https://bugs.meego.com/show_bug.cgi?format=multiple&id=20418 added a reverse patch ------------------------------------------------------------------- Tue Oct 4 08:09:57 UTC 2011 - adrian@suse.de - add binfmt misc handler binary patch from alex. This is a handler which calls qemu with -0 argument and right parameters to avoid broken runs due to different set $0 as on real hardware - move arch specific patches at the end to avoid arch dep conflicts with other patches - enable linux-user build to get binfmt handler ------------------------------------------------------------------- Thu Sep 29 09:21:17 UTC 2011 - adrian@suse.de - add 0021-implement-prlimit64-syscall.patch from upstream to avoid output and confused configure scripts when testing gcc on armv7hl - add 0022-fixing-smp-races.patch from alex to fix some SMP races ------------------------------------------------------------------- Tue Sep 27 09:57:34 UTC 2011 - adrian@suse.de - add 0020-linux-user-implement-reboot-syscall.patch from alex - extend 0010 mmap patch for files ------------------------------------------------------------------- Mon Sep 26 15:53:41 UTC 2011 - adrian@suse.de - add fix from alex for openat file permission handling ------------------------------------------------------------------- Mon Jun 20 09:25:59 UTC 2011 - aj@suse.de - Add BuildRequires: glibc-devel-static ------------------------------------------------------------------- Thu May 19 15:49:45 UTC 2011 - andrea@opensuse.org - removed un-required vde buildrequires ------------------------------------------------------------------- Tue May 17 03:29:17 UTC 2011 - brogers@novell.com - build correctly for SLE11 - reset revision to zero after version change ------------------------------------------------------------------- Wed May 11 13:47:03 UTC 2011 - andrea@opensuse.org - added 0018-qemu-0.14.1-mcast-udp.patch to enable multicast and udp tunneling support ------------------------------------------------------------------- Tue May 10 15:09:50 UTC 2011 - andrea@opensuse.org - New Upstream version 0.14.1 See http://wiki.qemu.org/Changelog/0.14 for changes in 0.14 - removed 0014-qemu-0.11-git-ioctl_mount.patch not required anymore - enabled vde support - some spec clean up ------------------------------------------------------------------- Mon Feb 21 10:48:07 UTC 2011 - coolo@novell.com - disable parallel build for a while, it takes too much memory for our workers ------------------------------------------------------------------- Thu Feb 10 14:48:36 CET 2011 - uli@suse.de - update -> 0.14.0-rc1 See http://wiki.qemu.org/Changelog/0.14 for changes in 0.14. (There is no such page for the 0.13 tree. The ChangeLog file ends at 0.12.0, http://wiki.qemu.org/ChangeLog at 0.12.5 and suggests to look at the git log. High-level information of what has changed in 0.13 is apparently not available.) ------------------------------------------------------------------- Fri May 28 18:57:23 CEST 2010 - uli@suse.de - update -> 0.12.4 see http://wiki.qemu.org/ChangeLog for changes ------------------------------------------------------------------- Wed May 19 17:37:03 UTC 2010 - brogers@novell.com - co-exist with virt-utils, which provides some qemu components (bnc#586115) ------------------------------------------------------------------- Sun Apr 18 01:34:46 UTC 2010 - crrodriguez@opensuse.org - requires timezone ------------------------------------------------------------------- Mon Oct 5 13:45:24 CEST 2009 - uli@suse.de - update -> 0.11.0 final - mips: fix conditional move off fp conditions codes (Nath Froyd) - fix migration to obey -S (Paolo Bonzini) - remove pc-0-10 machine type (Mark McLoughlin) - vnc: fix copyrect screen corruption (Gerd Hoffman) - fix vm state change handlers running order (Markus Armbruster) - e1000: fix eerc and ics emulation (Bill Paul) - fix sdl zooming with pl110 (Blue Swirl) - sparc64: flush pending conditional evaluations (Igor Kovalenko) - esp: fix interrupt register read (Blue Swirl) - option rom makefile fixes (Paul Brook) - fix sparse warnings (Blue Swirl) - fix symfind (Laurent Desnogues) - win32: fix default prefix (Stefan Weil) - fix checksum writing in signboot (Alex Graf) - fix sdl window resize (Stefano Stabellini) - do not resize the screen on hw_invalidate (Stefano Stabellini) - Add checks for -smbios option (Beth Kon) - fix do_set_link (Luiz Capitulino) - fix do_commit behavior (Luiz Capitulino) - make windows notice media change (Gleb Natapov) - check for PR_SET_NAME being defined (Nathan Froyd) - fix migration for ide devices (Anthony Liguori) - Use correct depth in vmware vga (Reimar Doffiner) - support 32bpp cursors in sdl (Reimar Doffinger) - fix device name completion for eject (Blue Swirl) - make screendump use DisplayState properly (Stefano Stabellini) - fix autostart with live migration (Avi Kivity) - fix detached migration with exec (Chris Lalancette) - fix segv when changing vnc password in sdl (Zach Amsden) - fix vnc password clearing with stdio monitor (Zach Amsden) - clean up VGA type selection (Zach Amsden) - add missing linefeed in error message (Stefan Weil) - fix rtc polling mode (Bernhard Kauer) - qcow2: order concurrent aio requests (Kevin Wolf) - qemu-io: port to win32 (Stefan Weil) - alpha: fix extlh instruction (Vince Weaver) - tcg: fix size of local variables in tcg_gen_bswap64_i64 (Stefan Weil) - net: fix send ordering (Jan Kiszka) - escc: fix IRQ routing (Aurelien Jarno) - versatile: fix Linux task preemption (Aurelien Jarno) - curses: reduce memory usage by 250MB (Aurelien Jarno) - disabled ppc64 host, seems to be very broken ------------------------------------------------------------------- Thu Sep 10 14:53:43 CEST 2009 - uli@suse.de - package missing tools (qemu-nbd, qemu-io) ------------------------------------------------------------------- Thu Sep 3 18:07:21 CEST 2009 - uli@suse.de - disable S/390 target on 32-bit platforms ------------------------------------------------------------------- Mon Aug 11 14:44:48 CEST 2009 - uli@suse.de - update -> 0.11.0 RC1 - add machine aliasing support (Mark McLoughlin) - add getfd/closefd monitor commands (Mark McLoughlin) - fix live migration (various) - HPET fixes (various) - slirp: fix guestfwd for incoming data (Jan Kiszka) - fix qemu-img convert to copy unallocated parts of the image (Akkarit Sangpetch) - vmdk: fix backing file handling (Kevin Wolf) - scsi: add save/restore support (Nolan Leake) - e1000: ignore reset command (Kevin Wolf) - allow monitor interaction when using -incoming exec: (Chris Lalancette) - fix -net socket,listen (Jan Kiszka) - serial: fix lost characters after sysrq (Jason Wessel) - lsi53c895a: Implement additional registers (Sebastian Herbszt) - i386: fix cpu reset (Nitin Kamble) - Prevent CD-ROM eject while device is locked (Mark McLoughlin) - Fix memory leaks (various) - Reset PS2 keyboard/mouse on reset (Dinesh Subraveti) - Fix -initrd with > 4GB guests (Glauber Costa) - qcow2 fixes (various) - Enable power button event generation (Gleb Natapov) - fix serial option in -drive - Fix non-ACPI timer interrupt routing (Beth Kon) - Fix keyboard mapping on newer Xords with non-default keymaps (balrog) - Make PCI config status register read-only (Anthony Liguori) - Fix crash on resolution change -> screen dump -> vga redraw (Avi Kivity) - fix savevm/loadvm (various) - virtio: fix guest oops with 2.6.25 kernels (Rusty Russell) - SH4: add support for -kernel (Takashi Yoshii, Aurelien Jarno) - hotplug: fix closing of char devices (Jan Kiszka) - hotplug: remove incorrect check for device name (Eduardo Habkost) - fix VGA regression (malc) - added S/390 host and target - maintaining patches in git - several linux-user improvements for compatibility and speed - enabled curl block driver, VNC TLS and SASL, AIO, and Bluetooth ------------------------------------------------------------------- Thu Apr 16 01:53:59 CEST 2009 - ro@suse.de - buildfix: refresh patches ------------------------------------------------------------------- Fri Mar 27 12:20:21 CET 2009 - crrodriguez@suse.de - BuildRequire zlib-devel-static ------------------------------------------------------------------- Tue Mar 24 15:33:47 CET 2009 - uli@suse.de - update -> release (0.10.1) - fixes bnc #435135 (CVE-2008-4539, SWAMP #22179), #362956 (CVE-2008-1945, CVE-2008-0928), #461565 (CVE-2008-2382) - Kernel Virtual Machine acceleration support - GDB XML register description support - Intel e1000 emulation - HPET emulation - VirtIO paravirtual device support - Marvell 88w8618 / MusicPal emulation - Nokia N-series tablet emulation / OMAP2 processor emulation - PCI hotplug support - Curses display support - qemu-nbd utility to mount supported block formats - Altivec support in PPC emulation and new firmware (OpenBIOS) - Multiple VNC clients are now supported - TLS encryption is now supported in VNC - MIPS Magnum R4000 machine (Hervé Poussineau) - Braille support (Samuel Thibault) - Freecom MusicPal system emulation (Jan Kiszka) - OMAP242x and Nokia N800, N810 machines (Andrzej Zaborowski) - EsounD audio driver (Frederick Reeve) - Gravis Ultrasound GF1 sound card (Tibor "TS" Schütz) - Many, many, bug fixes and new features - virtio-net: allow masking of notifications on empty queue (Alex Williamson) - e1000: fix rx descriptor low threshold logic (Alex Willaimson) - x86 tcg: add NULL checks to lsl instruction (Jan Kiszka) - kvm vga: fix screen corruption with -std-vga and Windows (Avi Kivity) - kvm vga: fix screen corruption with Ubuntu installations (Glauber Costa) - virtio-net: check right return size on sg list (Alex Williamson) - Make qemu_announce_self handle holes (live migration after hotplug) (Marcelo Tosatti) - Revert r6804-r6808 (qcow2 allocation info). This series of changes added a high cost to startup for large qcow2 images (Anthony Liguori) - qemu-img: fix help message (Aurelien Jarno) - Fix build for non-default installs of SDL (Anthony Liguori) - Fix race condition in env->interrupt_request. When using TCG and a dynticks host timer, this condition could cause TCG to get stuck in an infinite loop (Aurelien Jarno) - Fix reading encrypted hard disk passwords during early startup (Jan Kiszka) - Fix encrypted disk reporting in 'info block' (Jan Kiszka) - Fix console size with tiny displays (MusicPal) (Jan Kiszka) - Improve error handling in bdrv_open2 (Jan Kiszka) - Avoid leaking data in mux'ed character devices (Jan Kiszka) - Fix initial character device reset (no banner in monitor) (Jan Kiszka) - Fix cpuid KVM crash on i386 host (Lubomir Rintel) - Fix SLES10sp2 installation by adding ISTAT1 register to LSI SCSI emulation (Ryan Harper) - s390x TCG backend - i386-linux-user NPTL support ------------------------------------------------------------------- Wed Oct 8 17:03:34 CEST 2008 - uli@suse.de - update -> current SVN - fixes PPC hosts - fixes SH4 targets (reenabled), adds NPTL support - SSSE3, SSE4.* instructions, "unreal" mode fixed - Alpha target converted to TCG - live migration - Bluetooth emulation - SCSI tape support - OpenBIOS binary updated - UHCI emulation rewritten - lots of bugfixes ------------------------------------------------------------------- Mon Aug 4 13:08:59 CEST 2008 - ro@suse.de - fix build by adding return statements for two nonvoid functions (qemu-nonvoid_return.patch), actually unreached code ------------------------------------------------------------------- Thu Jul 24 13:56:06 CEST 2008 - uli@suse.de - update -> current SVN - MIPS Magnum R4000 machine (Hervé Poussineau) - Braille support (Samuel Thibault) - Freecom MusicPal system emulation (Jan Kiszka) - OMAP242x and Nokia N800, N810 machines (Andrzej Zaborowski) - EsounD audio driver (Frederick Reeve) - Gravis Ultrasound GF1 sound card (Tibor "TS" Schütz) - added pcap networking - ditched GCC3 thanks to TCG. Hooray! (downside: no PPC and SH4 emulation, no S/390 host) ------------------------------------------------------------------- Thu May 15 17:33:53 CEST 2008 - cthiel@suse.de - use lsilogic instead of buslogic for SCSI VMDK images ------------------------------------------------------------------- Thu May 8 13:56:20 CEST 2008 - uli@suse.de - add format option to disable autodetection of disk image format (bnc#380828) ------------------------------------------------------------------- Fri Apr 25 13:33:40 CEST 2008 - uli@suse.de - revert secfix (causes data corruption, no known good patch available yet) - support creation of SCSI VMDK images ------------------------------------------------------------------- Tue Mar 11 14:02:54 CET 2008 - uli@suse.de - secfix (unchecked block read/write vulnerability, bug #362956) ------------------------------------------------------------------- Thu Jan 17 15:19:54 CET 2008 - uli@suse.de - update -> 0.9.1 - TFTP booting from host directory (Anthony Liguori, Erwan Velu) - Tap device emulation for Solaris (Sittichai Palanisong) - Monitor multiplexing to several I/O channels (Jason Wessel) - ds1225y nvram support (Herve Poussineau) - CPU model selection support (J. Mayer, Paul Brook, Herve Poussineau) - Several Sparc fixes (Aurelien Jarno, Blue Swirl, Robert Reif) - MIPS 64-bit FPU support (Thiemo Seufer) - Xscale PDA emulation (Andrzej Zaborowski) - ColdFire system emulation (Paul Brook) - Improved SH4 support (Magnus Damm) - MIPS64 support (Aurelien Jarno, Thiemo Seufer) - Preliminary Alpha guest support (J. Mayer) - Gumstix boards: connex and verdex emulation (Thorsten Zitterell) - Intel mainstone II board emulation (Armin Kuster) - VMware SVGA II graphics card support (Andrzej Zaborowski) - revert s390-dis.c to last GPLv2 version - reenabled qemu-system-ppcemb ------------------------------------------------------------------- Mon Dec 10 14:29:42 CET 2007 - uli@suse.de - fixed open() usage with O_CREAT ------------------------------------------------------------------- Tue Nov 13 15:54:45 CET 2007 - uli@suse.de - update -> current CVS: - Read-only support for Parallels disk images (Alex Beregszaszi) - CRIS emulation (Edgar E. Iglesias) - SPARC32PLUS execution support (Blue Swirl) - MIPS mipssim pseudo machine (Thiemo Seufer) - Strace for Linux userland emulation (Stuart Anderson, Thayne Harbaugh) - OMAP310 MPU emulation plus Palm T|E machine (Andrzej Zaborowski) - ARM v6, v7, NEON SIMD and SMP emulation (Paul Brook/CodeSourcery) ------------------------------------------------------------------- Fri Oct 12 01:30:23 CEST 2007 - ro@suse.de - hack to fix build: undef DEBUG_BLOCK for now ------------------------------------------------------------------- Thu Sep 28 14:45:41 CEST 2007 - agraf@suse.de - fix SVM support (Alexander Graf) ------------------------------------------------------------------- Thu Sep 13 13:37:41 CEST 2007 - agraf@suse.de - add SVM emulation support (Alexander Graf) - fix a misassumption in the s390 fix (uli) - allow more IDE power management (Ben Guthro) - log any I/O error and perform automatic read retry for CDrom (Ben Guthro) - fix Coherent guest support (Jan Jezabek) - fix several Darwin guest issues (Filip Navara) ------------------------------------------------------------------- Mon Aug 20 11:05:39 CEST 2007 - agraf@suse.de - fix ATAPI bug when using libata (Brandon Philips) (#291775) ------------------------------------------------------------------- Sat Aug 11 09:20:48 CEST 2007 - olh@suse.de - disable only SNDRV_SB_CSP_IOCTL_LOAD_CODE for _IOC_SIZEBITS < 14 ------------------------------------------------------------------- Thu Aug 9 16:39:10 CEST 2007 - olh@suse.de - disable some alsa SB ioctl declarations ------------------------------------------------------------------- Mon Aug 6 22:35:06 CEST 2007 - olh@suse.de - remove inclusion of linux/compiler.h ------------------------------------------------------------------- Mon Jul 30 18:04:08 CEST 2007 - uli@suse.de - fixed for S/390 ------------------------------------------------------------------- Tue Jul 10 15:44:03 CEST 2007 - schwab@suse.de - Add (incomplete) m68k emulation. ------------------------------------------------------------------- Mon Jul 9 17:02:48 CEST 2007 - agraf@suse.de - included alsa support in qemu-user - update to current cvs - TFTP booting from host directory (Anthony Liguori, Erwan Velu) - Tap device emulation for Solaris (Sittichai Palanisong) - Monitor multiplexing to several I/O channels (Jason Wessel) - ds1225y nvram support (Herve Poussineau) - CPU model selection support (J. Mayer, Paul Brook, Herve Poussineau) - Several Sparc fixes (Aurelien Jarno, Blue Swirl) - MIPS 64-bit FPU support (Thiemo Seufer) - Xscale PDA emulation (Andrzei Zaborowski) - ColdFire system emulation (Paul Brook) - Improved SH4 support (Magnus Damm) - MIPS64 support (Aurelien Jarno, Thiemo Seufer) - Preliminary Alpha guest support (J. Mayer) - IPC fixes ------------------------------------------------------------------- Wed Jun 20 14:38:47 CEST 2007 - agraf@suse.de - applied proper fix for x86_64 and the MAP_32BIT flag ------------------------------------------------------------------- Wed Jun 20 10:59:11 CEST 2007 - uli@suse.de - added secfixes (bug #252519) ------------------------------------------------------------------- Thu Jun 14 18:53:18 CEST 2007 - agraf@suse.de - made wine work (set FS register to 0 on init) - suppressed robust_list warnings ------------------------------------------------------------------- Wed Jun 13 22:31:34 CEST 2007 - agraf@suse.de - made flash player 9 work on ppc - fixed FUTEX_WAKE_OP on machines where endianness differs - made mmap on x86_64 use the MAP_32BIT flag - removed a useless spin_lock - removed an annoying debug message for forking - implemented sched_getaffinity syscall - fixed configure call so it takes gcc3 again ------------------------------------------------------------------- Wed Jun 13 15:01:44 CEST 2007 - uli@suse.de - support "vga=" parameter (Pascal Terjan) - direct jump support for x86-64 (Gwenole Beauchesne) - fix chaining of CPU instances (Gwenole Beauchesne) - live migration support (Anthony Liguori) - fix fprem/fprem1 insns (Julian Seward) - KVM support - Z80/ZX Spectrum emulation (Stuart Brady) - GCC4 support postponed (breaks x86-64 on i386) ------------------------------------------------------------------- Mon Jun 11 16:12:00 CEST 2007 - agraf@suse.de - implemented TLS support on i386 so qemu-user can be used to run with current libc versions (partly done by David Woodhouse, fixed by Alexander Graf) - added a dirty hack for an mmap page table bug on qemu-user x86 emulation - disable AF_NETLINK in qemu-user (endianness problems) - applied fast path mangling patch from Kirill A. Shutemov - applied strace patch for debugging (by Stuart R. Anderson) ------------------------------------------------------------------- Wed Apr 4 20:01:42 CEST 2007 - agraf@suse.de - fixed initrd loading on x86 ------------------------------------------------------------------- Thu Mar 29 22:20:04 CEST 2007 - ro@suse.de - added bison to BuildRequires ------------------------------------------------------------------- Tue Feb 20 15:05:06 CET 2007 - uli@suse.de - added better fix by Robert Schiele (bug #241950) - update -> 0.9.0 - Support for relative paths in backing files for disk images - Async file I/O API - New qcow2 disk image format - Support of multiple VM snapshots - Linux: specific host CDROM and floppy support - SMM support - Moved PCI init, MP table init and ACPI table init to Bochs BIOS - Support for MIPS32 Release 2 instruction set (Thiemo Seufer) - MIPS Malta system emulation (Aurelien Jarno, Stefan Weil) - Darwin userspace emulation (Pierre d'Herbemont) - m68k user support (Paul Brook) - several x86 and x86_64 emulation fixes - Mouse relative offset VNC extension (Anthony Liguori) - PXE boot support (Anthony Liguori) - '-daemonize' option (Anthony Liguori) ------------------------------------------------------------------- Tue Feb 6 11:42:01 CET 2007 - uli@suse.de - added fix by Robert Schiele to work without usbdevfs (bug #241950) ------------------------------------------------------------------- Fri Feb 2 00:57:09 CET 2007 - ro@suse.de - remove -fstack-protector from CFLAGS ------------------------------------------------------------------- Fri Oct 27 18:48:53 CEST 2006 - schwab@suse.de - Fix char signedness. ------------------------------------------------------------------- Mon Sep 11 16:56:15 CEST 2006 - uli@suse.de - re-added ARM FPE patch - fixed SPARC on PPC - install missing openbios-sparc32 ------------------------------------------------------------------- Sat Sep 9 02:52:53 CEST 2006 - dmueller@suse.de - update to 0.8.2: - ACPI support - PC VGA BIOS fixes - MIPS FPU support (Marius Groeger) - PPC breakpoints and single stepping (Jason Wessel) - USB updates (Paul Brook) - UDP/TCP/telnet character devices (Jason Wessel) - Windows sparse file support (Frediano Ziglio) - RTL8139 NIC TCP segmentation offloading (Igor Kovalenko) - PCNET NIC support (Antony T Curtis) - Support for variable frequency host CPUs - Workaround for win32 SMP hosts - Support for AMD Flash memories (Jocelyn Mayer) - Audio capture to WAV files support (malc) ------------------------------------------------------------------- Tue May 30 11:57:16 CEST 2006 - uli@suse.de - fixed to build on PPC with new glibc ------------------------------------------------------------------- Mon May 29 13:39:30 CEST 2006 - uli@suse.de - fixed to build with new kernel headers ------------------------------------------------------------------- Wed Mar 8 18:14:04 CET 2006 - uli@suse.de - split giant patch - added NWFPE glue code fix ------------------------------------------------------------------- Tue Mar 7 22:31:12 CET 2006 - schwab@suse.de - More fixes for ia64 port. ------------------------------------------------------------------- Mon Mar 6 23:54:26 CET 2006 - schwab@suse.de - Remove obsolete hunk from ia64 patch. ------------------------------------------------------------------- Wed Jan 25 21:40:58 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Tue Dec 20 13:14:34 CET 2005 - uli@suse.de - update -> 0.8.0 ------------------------------------------------------------------- Thu Dec 8 14:47:53 CET 2005 - uli@suse.de - update to current CVS (MIPS userspace, ARM system, SMP, USB, NX, VLAN, serial, parallel, ES1370, ALSA backend) - build i386 and AMD64 emus with kqemu support if possible - install missing PPC video driver, SPARC boot ROM - install missing keymaps ------------------------------------------------------------------- Mon Nov 7 15:41:57 CET 2005 - uli@suse.de - updated linker scripts for new binutils release ------------------------------------------------------------------- Sat Sep 17 18:42:42 CEST 2005 - dmueller@suse.de - update to 0.7.2 ------------------------------------------------------------------- Mon Aug 15 23:11:50 CEST 2005 - schwab@suse.de - Don't package /emul/ia32-linux on ia64. ------------------------------------------------------------------- Mon Aug 15 16:27:02 CEST 2005 - schwab@suse.de - Fix compilation on ia64. ------------------------------------------------------------------- Mon Aug 1 15:28:42 CEST 2005 - uli@suse.de - update -> 0.7.1 - enabled x86_64-system ------------------------------------------------------------------- Mon Jul 11 16:29:52 CEST 2005 - uli@suse.de - update -> CVS (MIPS emulation) - build with throwaway GCC3 (still no GCC4-compatible QEMU in sight) - enabled armeb-user - link *-user statically (necessary for chrooting into non-native systems) - disabled s390, alpha, armv4l build (broken and unmaintained) - disabled qemu-fast (broken and deprecated) - disabled i386-user on x86_64 (useless) - build with %jobs ------------------------------------------------------------------- Wed Jun 1 02:24:11 CEST 2005 - ro@suse.de - update to 0.7.0, still no success with gcc-4 ------------------------------------------------------------------- Thu Jan 27 14:00:04 CET 2005 - uli@suse.de - baselibs-x86 link is unnecessary on x86/AMD64 - two ARM emulation fixes (RRX operand fix by Paul Brook, shifter carry fix by me) - SDL 1.2.8 can be linked statically -> enabled qemu-fast ------------------------------------------------------------------- Mon Nov 29 14:55:36 CET 2004 - uli@suse.de - update -> 0.6.1 - build softmmu binaries on s390 (still doesn't work though) - pack /emul/ia32-linux directory and symlink from /usr/share/qemu so it's possible to use the IA64 baselibs-x86 packages ------------------------------------------------------------------- Wed Sep 15 11:19:49 CEST 2004 - uli@suse.de - removed unnecessary dependency on private glibc symbol (bug #44864) ------------------------------------------------------------------- Fri Aug 6 16:52:36 CEST 2004 - uli@suse.de - update -> 0.6.0 (fixes for several OSs, improvements in emulated hardware (IDE, PCI, network, VGA, APM, PowerMac), minor fixes, tool for conversion of VMware images) ------------------------------------------------------------------- Tue May 11 16:18:25 CEST 2004 - uli@suse.de - update -> 0.5.5 (contains ARM, utime() fixes and several others) - make uname() return target machine name (fixes config.guess, rpm etc.) - fake sigaltstack() (fixes m4) - enabled x86-64 ------------------------------------------------------------------- Wed May 5 15:29:24 CEST 2004 - uli@suse.de - fixed ARM emulation bug ------------------------------------------------------------------- Wed Apr 28 16:39:31 CEST 2004 - uli@suse.de - build with -fno-unit-at-a-time (fixes PPC system emulator) ------------------------------------------------------------------- Wed Apr 28 10:14:17 CEST 2004 - uli@suse.de - update -> 0.5.4 (runs Linux/PPC, several fixes) ------------------------------------------------------------------- Mon Apr 19 16:17:00 CEST 2004 - uli@suse.de - initial package
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
