Merge qemu from Debian unstable for l-series
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
qemu (Ubuntu) |
Fix Released
|
Undecided
|
Christian Ehrhardt |
Bug Description
Scheduled-For: ubuntu-23.01
Upstream: tbd
Debian: 1:7.1+dfsg-2
Ubuntu: 1:7.0+dfsg-7ubuntu2
### New Debian Changes ###
qemu (1:7.1+dfsg-2) unstable; urgency=medium
* tulip-restrict-
fix possible stack or heap overflow (tulip: DMA reentrancy issue)
Closes: #1018055, CVE-2022-2962
* hw-pvrdma-
fix possible use-after-free in paravirtual RDMA device.
Closes: #1014589, CVE-2022-1050
* mention closing of #979677 (CVE-2020-14394) by 7.1
* d/rules: parametrify extra-cflags & extra-ldflags
* d/rules: explicitly disable pie on arm64 due to
https:/
Fixes FTBFS.
-- Michael Tokarev <email address hidden> Tue, 13 Sep 2022 20:08:43 +0300
qemu (1:7.1+dfsg-1) unstable; urgency=medium
* new upstream release (7.1)
Closes: #1014958, CVE-2022-35414
Closes: #1014590, CVE-2022-0216
Closes: #979677, CVE-2020-14394
Closes: #988333
* d/copyright:
- remove mentions of slirp (packaged separately)
- blindly convert to dep-5 (it needs a complete rewrite)
- add Files-Excluded from d/get-orig-
* d/gbp.conf: remove filter= (and whole [import-orig])
* d/watch: verify upstream tarballs
* d/rules: stop faking skiboot version, it is now properly included in
roms/
* d/patches:
- remove use-fixed-
- linux-user-
- remove patches applied upstream
* d/control:
- it is --enable-capstone now, not --enable-
- it is --enable-png now, not --enable-vnc-png
* d/rules: fix --enable-vhost-* options
* d/rules: remove vnc-png for xen too
* openbios-
* opensbi-
* d/rules: adopt vof build changes
* d/qemu-
* temporary workaround for gcc-12 bug #1019011: use gcc-11-
instead of gcc-alpha-linux-gnu (another option is to use -Os)
* d/control: temporarily build-depend on libva-dev till #1019485 is fixed
* add loongarch64 qemu-user and qemu-user arch
-- Michael Tokarev <email address hidden> Mon, 12 Sep 2022 11:50:53 +0300
qemu (1:7.0+dfsg-7) unstable; urgency=medium
* d/tests/
* d/tests/
* d/binfmt-install: use proper name for binfmt.d (*.conf)
Hopefully closes: #1011003
* two virtio-scsi bugfixes from upstream:
virtio-
virtio-
* 3 patches from upstream to fix possible coroutine crashes:
coroutine-
coroutine-
coroutine-
* target-
* d/control: stop suggesting sudo for qemu-user-static
* Revert 'd/rules: do not try to enable tcg-interpreter on unsupported
targets, it does not help anymore' - it does help but it needs a bit
more work
* disable xen support for qemu-system-x86 build and create a wrapper
for -i386 to redirect xen-related usage to xen-specific binary
with a warning (for bookworm only)
* common-
* d/rules: use regular variable assignment for BUILD_PACKAGES
* two trivial patches to fix spelling in roms:
openbios-
slof-
-- Michael Tokarev <email address hidden> Sun, 15 May 2022 15:49:12 +0300
qemu (1:7.0+dfsg-6) unstable; urgency=medium
* d/rules: the forgotten --enable-
* d/tests/
include test for qemu-user-static too.
-- Michael Tokarev <email address hidden> Mon, 09 May 2022 01:37:56 +0300
qemu (1:7.0+dfsg-5) unstable; urgency=medium
* d/tests/
-- Michael Tokarev <email address hidden> Sat, 07 May 2022 12:22:26 +0300
qemu (1:7.0+dfsg-4) unstable; urgency=medium
* d/tests/: fix failing tests.
- test-qemu-user: depend on gcc for dpkg-architecture to work,
and print debugging info for future switch to uname -m
- test-qemu-img: switch from using file to qemu-img info
### Old Ubuntu Delta ###
qemu (1:7.0+
[ Paride Legovini ]
* d/rules: disable LTO on non-amd64 builds (LP: #1921664)
* GCC-12 FTBFS (LP: #1988710)
- d/p/u/lp1988710
Silence -Warray-bounds false positive (treated as error)
[ Christian Ehrhardt ]
* More on GCC-12 FTBFS (LP 1988710)
- d/rules: set -O1 for alpha firmware build
- d/p/u/lp1988710
further FTBFS fixup
-- Christian Ehrhardt <email address hidden> Mon, 19 Sep 2022 08:07:24 +0200
qemu (1:7.0+
* Merge with Debian unstable (LP: #1971315)(LP: #1980896), remaining changes:
- qemu-kvm to systemd unit
- d/qemu-kvm-init: script for QEMU KVM preparation modules, ksm,
hugepages and architecture specifics
- d/qemu-
- d/qemu-
- d/qemu-
- d/rules: call dh_installinit and dh_installsystemd for qemu-kvm
- Distribution specific machine type
(LP: 1304107 1621042 1776189 1761372 1761372 1776189)
- d/p/ubuntu/
types containing release versioned machine attributes
- d/qemu-
for host-phys-bits=true
- Add an info about -hpb machine type in debian/
- ubuntu-q35 alias added to auto-select the most recent q35 ubuntu type
- Enable nesting by default
- d/p/ubuntu/
in qemu64 on amd
[ No more strictly needed, but required for backward compatibility ]
- tolerate ipxe size change on migrations to >=18.04 (LP: 1713490)
- d/p/ubuntu/
reference 256k path
- d/control-in: depend on ipxe-qemu-
handle incoming migrations from former releases.
- d/qemu-
- Ease the use of module retention on upgrades (LP 1913421)
- debian/
- Fix I/O stalls when using NVMe storage (LP 1970737).
- d/p/lp1970737-
in laio_io_unplug.
- SECURITY UPDATE: heap overflow in floppy disk emulator
- debian/
- CVE-2021-3507
* Dropped Changes [now part of 1:7.0+dfsg-7]:
- d/rules: xen libexec dir is no more versioned
- d/rules: ensure xen is built on x86
- d/kvm-spice: fix when acceleration is already defined on the commandline
- debian/
* Dropped Changes [now part of upstream v7.0.0]
- d/p/u/lp-
Allow long kernel command lines for QEMU (LP 1959984)
- d/p/u/fix-
- d/p/u/tcg-
tcg on s390x.
- Fix diff handling on ceph that can cause data corruption (LP 1968258)
- d/p/u/lp-
- d/p/u/lp-
- d/p/u/lp-
in vnc connections (LP 1970563)
- All CVE fixes of 1:6.2+dfsg-2ubuntu8 except CVE-2021-3507
* Dropped Changes
- d/p/lp-
add patch to workaround FTBFS when building against OpenSSL 3.0.
[ now working with OpenSSL 3.0 ]
- d/optionrom.mak, d/p/u/avoid-
-
[ fixed in compiler toolchain ]
- Make qemu-system-
in qemu-system-x86 itself.
[ no more needed]
* Added Changes
- d/control-in: switch qemu-system-x86-xen to qemu-system-xen as this
landed in Debian but under a different name.
- d/p/u/qboot-
with LTO
- d/p/u/lp-1981339-*: fix s390x system emulation (LP: #1981339)
-- Christian Ehrhardt <email address hidden> Tue, 05 Jul 2022 12:07:19 +0200
Related branches
- git-ubuntu bot: Approve
- Andreas Hasenack (community): Approve
- Canonical Server Reporter: Pending requested
-
Diff: 6922 lines (+6313/-13)16 files modifieddebian/changelog (+4885/-3)
debian/control (+55/-8)
debian/control-in (+5/-2)
debian/patches/series (+6/-0)
debian/patches/ubuntu/define-ubuntu-machine-types.patch (+911/-0)
debian/patches/ubuntu/enable-svm-by-default.patch (+34/-0)
debian/patches/ubuntu/pre-bionic-256k-ipxe-efi-roms.patch (+62/-0)
debian/patches/ubuntu/qboot-Disable-LTO-for-ELF-binary-build-step.patch (+44/-0)
debian/qemu-block-extra.postinst (+59/-0)
debian/qemu-kvm-init (+89/-0)
debian/qemu-system-common.install (+1/-0)
debian/qemu-system-common.qemu-kvm.default (+8/-0)
debian/qemu-system-common.qemu-kvm.service (+16/-0)
debian/qemu-system-x86.NEWS (+80/-0)
debian/qemu-system-x86.README.Debian (+47/-0)
debian/rules (+11/-0)
CVE References
Changed in qemu (Ubuntu): | |
assignee: | nobody → Christian Ehrhardt (paelzer) |
The extra packages in the ecosystem around qemu seem fine.
- virtglrenderer is assigned to bryce and started.
- edk2 and seabios are in sync
- In ipxe we are still ahead and have neither a new upstream release nor urgent requests (can stay as-is)
- libvirt 9.0 isn't released yet, but we are working to get it updated in Debian before the freeze hits.
Extra cases to check in https:/ /bugs.launchpad .net/ubuntu/ +source/ qemu/+bugs? field.tag= qemu-23. 04