-
Tue Mar 24 2026 Mark Kanda <mark.kanda@oracle.com> - 10.1.4-3.el9
- spec: Fix requirement for UEK8U2 and update version/changelog (Mark Kanda) [Orabug: 39114880]
-
Fri Mar 20 2026 Mark Kanda <mark.kanda@oracle.com> - 10.1.4-2.el9
- spec: Add requirement for UEK8U2 and update version/changelog (Mark Kanda)
-
Fri Feb 13 2026 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.4-1.el9
- Update version for 10.1.4 release (Michael Tokarev)
- scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command (Andrey Drobyshev)
- linux-user/syscall.c: Prevent acquiring clone_lock while fork() (Aleksandr Sergeev)
- hw/cxl: Take into account how many media operations are requested for param check (Jonathan Cameron)
- hw/cxl: Check for overflow on santize media as both base and offset 64bit. (Jonathan Cameron)
- virtio-gpu: fix error handling in virgl_cmd_resource_create_blob (Honglei Huang)
- virtio-pmem: ignore empty queue notifications (Li Chen)
- virtio-gpu-virgl: correct parent for blob memory region (Joelle van Dyne)
- cryptodev-builtin: Limit the maximum size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- hw/virtio/virtio-crypto: verify asym request size (zhenwei pi) [Orabug: 38868251] {CVE-2025-14876}
- q35: Fix migration of SMRAM state (Igor Mammedov)
- pcie_sriov: Fix PCI_SRIOV_* accesses in pcie_sriov_pf_exit() (Kevin Wolf)
- virtio: Fix crash when sriov-pf is set for non-PCI-Express device (Kevin Wolf)
- virtio-dmabuf: Ensure UUID persistence for hash table insertion (Dorinda Bassey)
- vdpa: fix vhost-vdpa suspended state not be shared (Wafer Xie)
- hw/i2c/aspeed_i2c: Fix DMA moving data into incorrect address (Jamin Lin)
- hw/i2c/aspeed: Fix wrong I2CC_DMA_LEN when I2CM_DMA_TX/RX_ADDR set first (Jamin Lin)
- hw/arm/aspeed_ast27x0: Fix EHCI3/4 IRQ routing to GIC (Jamin Lin)
- hw/i2c/aspeed_i2c.c: Add a check for dma_read (Nabih Estefan)
- hw/adc: Fix out-of-bounds write in Aspeed ADC model (Cédric Le Goater)
- hw/uefi: fix size negotiation (Gerd Hoffmann)
- hw/nvme: Fix bootindex suffix use-after-free (Akihiko Odaki)
- python: fix msys64 wheel directory specification (John Snow)
- tests/qtest/ufs-test: Add test for mcq completion queue wraparound (Ilia Levi)
- hw/ufs: Fix mcq completion queue wraparound (Ilia Levi)
- hw/ufs: fix CQE endianness and UPIU length (Jeuk Kim)
- hw/ufs: Ensure DBC of PRDT uses only lower 18 bits (Jeuk Kim)
- tests/functional: migrate sbsa_ref test images (Alex Bennée)
- pc-bios/optionrom: Use 32-bit linker emulation for the optionroms (Thomas Huth)
- target/i386/tcg: fix a few instructions that do not support VEX.L=1 (Paolo Bonzini)
- linux-user: fixup termios2 related things on PowerPC (Icenowy Zheng)
- linux-user: Add missing termios baud rates (Vivian Wang)
- linux-user: Add termios2 support to sparc target (Luca Bonissi)
- linux-user: Add termios2 support to sh4 target (Luca Bonissi)
- linux-user: Add termios2 support to mips target (Luca Bonissi)
- linux-user: Add termios2 support to hppa target (Luca Bonissi)
- linux-user: Add termios2 support to alpha target (Luca Bonissi)
- linux-user: Add termios2 support (Luca Bonissi)
- hw/intc: avoid byte swap fiddling in gicv3 its path (Alex Bennée)
- bsd-user/syscall_defs.h: define STAT_TIME_T_EXT only for 32 bits (Pierrick Bouvier)
- bsd-user: Fix __i386__ test for TARGET_HAS_STAT_TIME_T_EXT (Richard Henderson)
- hw/sd/sdhci: Fix TYPE_IMX_USDHC to implement sd-spec-version 3 by default (Bernhard Beschow)
- linux-user/aarch64/target_fcntl.h: add missing TARGET_O_LARGEFILE definition (Pierrick Bouvier)
- tests/functional: Mark another MIPS replay test as flaky (Philippe Mathieu-Daudé)
- tests/functional: Mark the MIPS replay tests as flaky (Philippe Mathieu-Daudé)
- accel/nvmm: Fix 'cpu' typo in nvmm_init_vcpu() (Philippe Mathieu-Daudé)
- target/arm: Correctly trap HCR.TID1 registers in v7A (Peter Maydell)
- target/arm: Correctly honour HCR.TID3 for v7A cores (Peter Maydell)
- target/arm: Don't specify ID_PFR1 accessfn twice (Peter Maydell)
- tests/functional: migrate aspeed_rainier image (Alex Bennée)
- hw/loongarch/virt: Don't abort on access to unimplemented IOCSR (Yao Zi)
- target/loongarch: Fix exception ADEF/ADEM missing to update CSR_BADV (Song Gao)
- target/loongarch: Fix exception BCE missing to update CSR_BADV (Song Gao)
- target/loongach: Fix some exceptions failure in updating CSR_BADV (Song Gao)
- hw/loongarch/virt: Fix irq allocation failure with pci device from fdt (Xianglai Li)
- hw/loongarch/virt: Modify the interrupt trigger type in fdt table (Xianglai Li)
- hw/i386/kvm: fix PIRQ bounds check in xen_physdev_map_pirq() (Vulnerability Report) [Orabug: 38868257] {CVE-2026-0665}
- target/i386/tcg: allow VEX in 16-bit protected mode (Paolo Bonzini)
- target/i386/tcg: mask addresses for VSIB (Paolo Bonzini)
- target/i386/tcg: do not mark all SSE instructions as unaligned (Paolo Bonzini)
- m68k: fix CAS2 writeback when Dc1==Dc2 (Laurent Vivier)
- configs: use default prefix for Windows compilation (Paolo Bonzini)
- target/ppc: Fix env->quiesced migration (Fabiano Rosas)
- tests: add tcg coverage for fixed mremap bugs (Matthew Lugg)
- linux-user: fix reserved_va page leak in do_munmap (Matthew Lugg)
- linux-user: fix mremap errors for invalid ranges (Matthew Lugg)
- linux-user: fix mremap unmapping adjacent region (Matthew Lugg)
- linux-user: allow null `pathname` for statx()/fstatat() (Jean-Christian CÎRSTEA)
- tcg/riscv: Fix TCG_REG_TMP0 clobber in tcg_gen_dup{m,i} (Richard Henderson)
- tcg/optimize: Do use affected bits (Paolo Bonzini)
- tcg/optimize: Fix a_mask computation for orc (Richard Henderson)
- tcg/optimize: Save o_mask in fold_masks_zosa_int (Richard Henderson)
- monitor/qmp: cleanup SocketChardev listener sources early to avoid fd handling race (Jie Song)
- tests/functional: Fix URL of gb200nvl-bmc image (Cédric Le Goater)
- hw/i2c/imx: Fix trace func name error (Alano Song)
- target/i386/tcg: ignore V3 in 32-bit mode (Paolo Bonzini)
- target/i386: Fix #GP error code for INT instructions (Andrew Cooper)
- qdev: fix error handling in set_uint64_checkmask (Zesen Liu)
- gdbstub: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- monitor: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- tests/vhost-user-bridge.c: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- i386: Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- Fix const qualifier build errors with recent glibc (Cédric Le Goater)
- qga: Fix ubsan warning (Thomas Huth)
- tests/qemu-iotests: Fix check for existing file in _require_disk_usage() (Thomas Huth)
- Revert "nvme: Fix coroutine waking" (Hanna Czenczek)
- nvme: Note in which AioContext some functions run (Hanna Czenczek)
- block: Fix BDS use after free during shutdown (Kevin Wolf)
- scripts/nsis.py: Tell makensis that WoA is 64 bit (Stefan Weil)
- vhost: Always initialize cached vring data (Hanna Czenczek)
- scripts: fix broken error path in modinfo-collect.py (Denis V. Lunev)
- target/arm: handle unaligned PC during tlb probe (Alex Bennée)
- gitlab: move custom runners to Ubuntu 24.04 (Alex Bennée)
- gitlab-ci.d/cirrus: Update the FreeBSD job to v14.3 (Michael Tokarev)
- tcg: Zero extend 32-bit addresses for TCI (Richard Henderson)
- file-posix: Handle suspended dm-multipath better for SG_IO (Kevin Wolf)
-
Tue Feb 10 2026 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.3-2.el9
- Update epoch value (Karl Heubaum)
-
Wed Dec 10 2025 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.3-1.el9
- Update version for 10.1.3 release (Michael Tokarev)
- kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value (Markus Armbruster)
- docs/devel: Update URL for make-pullreq script (Peter Maydell)
- target/arm: Fix assert on BRA. (Harald van Dijk)
- hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN (Cédric Le Goater)
- hw/core/machine: Provide a description for aux-ram-share property (Peter Xu)
- hw/pci: Make msix_init take a uint32_t for nentries (Peter Maydell)
- block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() (Fiona Ebner)
- iotests: add Linux loop device image creation test (Stefan Hajnoczi)
- block: use pwrite_zeroes_alignment when writing first sector (Stefan Hajnoczi)
- file-posix: populate pwrite_zeroes_alignment (Stefan Hajnoczi)
- block-backend: Fix race when resuming queued requests (Kevin Wolf)
- ui/vnc: Fix qemu abort when query vnc info (AlanoSong@163.com)
- chardev/char-pty: Do not ignore chr_write() failures (Philippe Mathieu-Daudé)
- ui/vdagent: fix windows agent regression (Marc-André Lureau)
- hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() (Peter Maydell)
- hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs (Peter Maydell)
- hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure (Jamin Lin)
- hw/arm/ast27x0: Fix typo in LTPI address (Nabih Estefan)
- migration: Fix transition to COLO state from precopy (Li Zhijian)
- qmp: Fix a typo for a USO feature (Jack Wang)
- target/i386: fix stack size when delivering real mode interrupts (Paolo Bonzini)
- target/i386: svm: fix sign extension of exit code (Paolo Bonzini)
- target/i386/tcg: validate segment registers (Paolo Bonzini)
- target/i386: Mark VPERMILPS as not valid with prefix 0 (Peter Maydell)
- hw/southbridge/lasi: Correct LasiState parent (Philippe Mathieu-Daudé)
- hw/dma/zynq-devcfg: Fix register memory (Yannick Voßen)
- tests/functional: handle URLError when fetching assets (Daniel P. Berrangé)
- tests/functional: fix formatting of exception args (Daniel P. Berrangé)
- block/io: Take reqs_lock for tracked_requests (Hanna Czenczek)
- nvme: Fix coroutine waking (Hanna Czenczek)
- nvme: Kick and check completions in BDS context (Hanna Czenczek)
- curl: Fix coroutine waking (Hanna Czenczek)
- nfs: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- rbd: Run co BH CB in the coroutine’s AioContext (Hanna Czenczek)
- tests: move test_virt_gpu to share.linaro.org (Alex Bennée)
- tests: move test_kvm to share.linaro.org (Alex Bennée)
- tests: move test_kvm_xen to share.linaro.org (Alex Bennée)
- tests: move test_netdev_ethtool to share.linaro.org (Alex Bennée)
- tests: move test_virt assets to share.linaro.org (Alex Bennée)
- tests: move test_xen assets to share.linaro.org (Alex Bennée)
- hw/misc/npcm_clk: Don't divide by zero when calculating frequency (Peter Maydell)
- hw/display/xlnx_dp: Don't abort for unsupported graphics formats (Peter Maydell)
- hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun (Peter Maydell)
- net: pad packets to minimum length in qemu_receive_packet() (Peter Maydell)
- hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert (Peter Maydell)
- hw/net/e1000e_core: Correct rx oversize packet checks (Peter Maydell)
- hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors (Peter Maydell)
- qio: Protect NetListener callback with mutex (Eric Blake)
- qio: Remember context of qio_net_listener_set_client_func_full (Eric Blake)
- qio: Unwatch before notify in QIONetListener (Eric Blake)
- qio: Add trace points to net_listener (Eric Blake)
- tests/qemu-iotest: fix iotest 024 with qed images (Alberto Garcia)
- qemu-img rebase: don't exceed IO_BUF_SIZE in one operation (Alberto Garcia)
- qemu-img: Fix amend option parse error handling (Akihiko Odaki)
- tests/qtest/bios-tables-test: Update DSDT blobs after GPEX _DSM change (Shameer Kolothum)
- hw/pci-host/gpex-acpi: Fix _DSM function 0 support return value (Eric Auger)
- tests/qtest/bios-tables-test: Prepare for _DSM change in the DSDT table (Shameer Kolothum)
- vhost-user: fix shared object lookup handler logic (Albert Esteve)
- target/x86: Correctly handle invalid 0x0f 0xc7 0xxx insns (Peter Maydell)
- hostmem/shm: Allow shm memory backend serve as shared memory for coco-VMs (Xiaoyao Li)
- ram-block-attributes: fix interaction with hugetlb memory backends (Chenyi Qiang)
- tests/tcg/s390x: Test SET CLOCK COMPARATOR (Ilya Leoshkevich)
- target/s390x: Use address generation for register branch targets (Ilya Leoshkevich)
- target/s390x: Fix missing clock-comparator interrupts after reset (Ilya Leoshkevich)
- target/s390x: Fix missing interrupts for small CKC values (Ilya Leoshkevich)
- target/microblaze: Handle signed division overflows (Edgar E. Iglesias)
- target/microblaze: div: Break out raise_divzero() (Edgar E. Iglesias)
- target/microblaze: Remove unused arg from check_divz() (Edgar E. Iglesias)
- gdbstub: Fix %s formatting (Sean Anderson)
- block/curl.c: Fix CURLOPT_VERBOSE parameter type (Richard W.M. Jones)
- block: fix luks 'amend' when run in coroutine (Daniel P. Berrangé)
- block: remove 'detached-header' option from opts after use (Daniel P. Berrangé)
- i386/kvm/cpu: Init SMM cpu address space for hotplugged CPUs (Xiaoyao Li)
- hw/i386/pc: Avoid overlap between CXL window and PCI 64bit BARs in QEMU (peng guo)
- target/i386: clear CPU_INTERRUPT_SIPI for all accelerators (Paolo Bonzini)
- linux-user: permit sendto() with NULL buf and 0 len (Peter Maydell)
- linux-user: Use correct type for FIBMAP and FIGETBSZ emulation (Bastian Blank)
- qtest/am53c974-test: add additional test for cmdfifo overflow (Mark Cave-Ayland)
- esp.c: fix esp_cdb_ready() FIFO wraparound limit calculation (Mark Cave-Ayland)
- hw/hppa: Fix interrupt of LASI parallel port (Helge Deller)
- target/hppa: Set FPCR exception flag bits for non-trapped exceptions (Peter Maydell)
- hw/scsi: avoid deadlock upon TMF request cancelling with VirtIO (Fiona Ebner)
- crypto: stop requiring "key encipherment" usage in x509 certs (Daniel P. Berrangé)
- io: fix use after free in websocket handshake code (Daniel P. Berrangé) {CVE-2025-11234}
- io: move websock resource release to close method (Daniel P. Berrangé)
- io: release active GSource in TLS channel finalizer (Daniel P. Berrangé)
- target/riscv: fix riscv_cpu_sirq_pending() mask (Daniel Henrique Barboza)
- target/riscv/kvm: fix env->priv setting in reset_regs_csr() (Daniel Henrique Barboza)
- aplic: fix mask for smsiaddrcfgh (Jialong Yang)
- hw/riscv: Correct mmu-type property of sifive_u harts in device tree (Zejun Zhao)
- target/arm: Fix reads of CNTFRQ_EL0 in linux-user mode (Peter Maydell)
- vfio: only check region info cache for initial regions (John Levon)
- vfio: rename field to "num_initial_regions" (John Levon)
- hw/ppc/e500: Check for compatible CPU type instead of aborting ungracefully (Thomas Huth)
- tests/tcg/multiarch/linux/linux-test: Don't try to test atime update (Peter Maydell)
- tcg/arm: Fix tgen_deposit (Richard Henderson)
-
Mon Oct 20 2025 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.2-1.el9
- Update for QEMU 10.1.2.
-
Wed Oct 08 2025 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.1-1.el9
- Update for QEMU 10.1.1.
-
Mon Sep 15 2025 Karl Heubaum <karl.heubaum@oracle.com> - 10.1.0-1.el9
- Update for QEMU 10.1.0.
-
Tue Sep 09 2025 Mark Kanda <mark.kanda@oracle.com> - 7.2.0-28.el9
- hw/i386: Add an exadata machine (Joao Martins) [Orabug: 38408711]
- arm/kvm: add support for MTE (Cornelia Huck)
- target/arm: When tag memory is not present, set MTE=1 (Richard Henderson)
- spec: provide qemu-kvm-device-usb-host package (Mark Kanda) [Orabug: 38355110]
- kvm.conf: do not automatically enable virt when loading kvm (Mark Kanda) [Orabug: 38320046]
-
Wed Aug 06 2025 Mark Kanda <mark.kanda@oracle.com> - 7.2.0-26.el9
- accel/kvm: Enable Dirty bit tracking if hash cache is used (Joao Martins) [Orabug: 37699414]
- migration/page_cache: Add nettle sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add libgcrypt sha256 function (Elena Ufimtseva) [Orabug: 37699414]
- migration/page_cache: Add gnutls sha256 function (Joao Martins) [Orabug: 37699414]
- migration: Add a parameter to select sha256 library (Joao Martins) [Orabug: 37699414]
- migration: Export cache statistics to QMP (Joao Martins) [Orabug: 37699414]
- migration/ram: Adjust estimate/exact to time-to-hash dirty data (Joao Martins) [Orabug: 37699414]
- migration: Sync dirty bitmap in exact() considering factor (Joao Martins) [Orabug: 37699414]
- migration: Time cache hit/miss operations (Joao Martins) [Orabug: 37699414]
- migration/ram: Calculate real dirty pages based on hash cache stats (Elena Ufimtseva) [Orabug: 37699414]
- migration: Add hash cache for dirty page tracking (Elena Ufimtseva) [Orabug: 37699414]
- migration/page-cache: Differentiate page size from cache data size (Joao Martins) [Orabug: 37699414]
- target/i386: do not expose ARCH_CAPABILITIES on AMD CPU (Paolo Bonzini) [Orabug: 38225280]