Merge qemu from Debian unstable for l-series

Bug #1993438 reported by Bryce Harrington
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
qemu (Ubuntu)
Fix Released
Undecided
Christian Ehrhardt 

Bug Description

Scheduled-For: ubuntu-23.01
Upstream: tbd
Debian: 1:7.1+dfsg-2
Ubuntu: 1:7.0+dfsg-7ubuntu2

### New Debian Changes ###

qemu (1:7.1+dfsg-2) unstable; urgency=medium

  * tulip-restrict-DMA-engine-to-memories-CVE-2022-2962.patch
    fix possible stack or heap overflow (tulip: DMA reentrancy issue)
    Closes: #1018055, CVE-2022-2962
  * hw-pvrdma-protect-against-guest-driver-CVE-2022-1050.patch
    fix possible use-after-free in paravirtual RDMA device.
    Closes: #1014589, CVE-2022-1050
  * mention closing of #979677 (CVE-2020-14394) by 7.1
  * d/rules: parametrify extra-cflags & extra-ldflags
  * d/rules: explicitly disable pie on arm64 due to
    https://sourceware.org/bugzilla/show_bug.cgi?id=29514
    Fixes FTBFS.

 -- Michael Tokarev <email address hidden> Tue, 13 Sep 2022 20:08:43 +0300

qemu (1:7.1+dfsg-1) unstable; urgency=medium

  * new upstream release (7.1)
    Closes: #1014958, CVE-2022-35414
    Closes: #1014590, CVE-2022-0216
    Closes: #979677, CVE-2020-14394
    Closes: #988333
  * d/copyright:
   - remove mentions of slirp (packaged separately)
   - blindly convert to dep-5 (it needs a complete rewrite)
   - add Files-Excluded from d/get-orig-source.sh
  * d/gbp.conf: remove filter= (and whole [import-orig])
  * d/watch: verify upstream tarballs
  * d/rules: stop faking skiboot version, it is now properly included in
    roms/skiboot/.version file. Add a dependency on this file too
  * d/patches:
   - remove use-fixed-data-path.patch: not needed anymore
   - linux-user-binfmt-P.diff: refresh
   - remove patches applied upstream
  * d/control:
   - it is --enable-capstone now, not --enable-capstone=system
   - it is --enable-png now, not --enable-vnc-png
  * d/rules: fix --enable-vhost-* options
  * d/rules: remove vnc-png for xen too
  * openbios-array-bounds-gcc12.patch
  * opensbi-fix-build-with-binutils-2.38.patch
  * d/rules: adopt vof build changes
  * d/qemu-system-data.docs: omit ccid.txt (removed)
  * temporary workaround for gcc-12 bug #1019011: use gcc-11-alpha-linux-gnu
    instead of gcc-alpha-linux-gnu (another option is to use -Os)
  * d/control: temporarily build-depend on libva-dev till #1019485 is fixed
  * add loongarch64 qemu-user and qemu-user arch

 -- Michael Tokarev <email address hidden> Mon, 12 Sep 2022 11:50:53 +0300

qemu (1:7.0+dfsg-7) unstable; urgency=medium

  * d/tests/test-qemu-user: rework ls/glob test a bit
  * d/tests/test-qemu-user: fix ppc64le qemu architecture name
  * d/binfmt-install: use proper name for binfmt.d (*.conf)
    Hopefully closes: #1011003
  * two virtio-scsi bugfixes from upstream:
    virtio-scsi-fix-ctrl-and-event-handler-functions-in-dataplane.patch
    virtio-scsi-don-t-waste-CPU-polling-the-event-virtqueue.patch
  * 3 patches from upstream to fix possible coroutine crashes:
    coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch
    coroutine-rename-qemu_coroutine_inc-dec_pool_size.patch
    coroutine-revert-to-constant-batch-size.patch
  * target-i386-do-not-consult-nonexistent-host-leaves.patch
  * d/control: stop suggesting sudo for qemu-user-static
  * Revert 'd/rules: do not try to enable tcg-interpreter on unsupported
    targets, it does not help anymore' - it does help but it needs a bit
    more work
  * disable xen support for qemu-system-x86 build and create a wrapper
    for -i386 to redirect xen-related usage to xen-specific binary
    with a warning (for bookworm only)
  * common-user-no-user.patch: fix one of FTBFS on unsupported architectures
  * d/rules: use regular variable assignment for BUILD_PACKAGES
  * two trivial patches to fix spelling in roms:
    openbios-spelling-endianess.patch
    slof-spelling-seperator.patch

 -- Michael Tokarev <email address hidden> Sun, 15 May 2022 15:49:12 +0300

qemu (1:7.0+dfsg-6) unstable; urgency=medium

  * d/rules: the forgotten --enable-xen-pci-passthrough for the xen build
  * d/tests/test-qemu-user: rewrite to be more robust and complete and
    include test for qemu-user-static too.

 -- Michael Tokarev <email address hidden> Mon, 09 May 2022 01:37:56 +0300

qemu (1:7.0+dfsg-5) unstable; urgency=medium

  * d/tests/test-qemu-user.sh: more arch-specific debugging/updates

 -- Michael Tokarev <email address hidden> Sat, 07 May 2022 12:22:26 +0300

qemu (1:7.0+dfsg-4) unstable; urgency=medium

  * d/tests/: fix failing tests.
    - test-qemu-user: depend on gcc for dpkg-architecture to work,
      and print debugging info for future switch to uname -m
    - test-qemu-img: switch from using file to qemu-img info

### Old Ubuntu Delta ###

qemu (1:7.0+dfsg-7ubuntu2) kinetic; urgency=medium

  [ Paride Legovini ]
  * d/rules: disable LTO on non-amd64 builds (LP: #1921664)
  * GCC-12 FTBFS (LP: #1988710)
    - d/p/u/lp1988710-silence-openbios-array-bounds-false-positive.patch.
      Silence -Warray-bounds false positive (treated as error)

  [ Christian Ehrhardt ]
  * More on GCC-12 FTBFS (LP 1988710)
    - d/rules: set -O1 for alpha firmware build
    - d/p/u/lp1988710-opensbi-Makefile-fix-build-with-binutils-2.38.patch:
      further FTBFS fixup

 -- Christian Ehrhardt <email address hidden> Mon, 19 Sep 2022 08:07:24 +0200

qemu (1:7.0+dfsg-7ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1971315)(LP: #1980896), remaining changes:
    - qemu-kvm to systemd unit
      - d/qemu-kvm-init: script for QEMU KVM preparation modules, ksm,
        hugepages and architecture specifics
      - d/qemu-system-common.qemu-kvm.service: systemd unit to call
        qemu-kvm-init
      - d/qemu-system-common.install: install helper script
      - d/qemu-system-common.qemu-kvm.default: defaults for
        /etc/default/qemu-kvm
      - d/rules: call dh_installinit and dh_installsystemd for qemu-kvm
    - Distribution specific machine type
      (LP: 1304107 1621042 1776189 1761372 1761372 1776189)
      - d/p/ubuntu/define-ubuntu-machine-types.patch: define distro machine
        types containing release versioned machine attributes
      - d/qemu-system-x86.NEWS Info on fixed machine type defintions
        for host-phys-bits=true
      - Add an info about -hpb machine type in debian/qemu-system-x86.NEWS
      - ubuntu-q35 alias added to auto-select the most recent q35 ubuntu type
    - Enable nesting by default
      - d/p/ubuntu/enable-svm-by-default.patch: Enable nested svm by default
        in qemu64 on amd
        [ No more strictly needed, but required for backward compatibility ]
    - tolerate ipxe size change on migrations to >=18.04 (LP: 1713490)
      - d/p/ubuntu/pre-bionic-256k-ipxe-efi-roms.patch: old machine types
        reference 256k path
      - d/control-in: depend on ipxe-qemu-256k-compat-efi-roms to be able to
        handle incoming migrations from former releases.
    - d/qemu-system-x86.README.Debian: add info about updated nesting changes
    - Ease the use of module retention on upgrades (LP 1913421)
      - debian/qemu-block-extra.postinst: enable mount unit on install/upgrade
    - Fix I/O stalls when using NVMe storage (LP 1970737).
      - d/p/lp1970737-linux-aio-*.patch: Fix unbalanced plugged counter
        in laio_io_unplug.
    - SECURITY UPDATE: heap overflow in floppy disk emulator
      - debian/patches/CVE-2021-3507.patch: prevent end-of-track overrun in
        hw/block/fdc.c.
      - CVE-2021-3507
  * Dropped Changes [now part of 1:7.0+dfsg-7]:
    - d/rules: xen libexec dir is no more versioned
    - d/rules: ensure xen is built on x86
    - d/kvm-spice: fix when acceleration is already defined on the commandline
    - debian/control[-in]: no more disable glusterfs in Ubuntu (LP 1246924)
  * Dropped Changes [now part of upstream v7.0.0]
    - d/p/u/lp-1959984-s390x-ipl-support-extended-kernel-command-line-size.patch
      Allow long kernel command lines for QEMU (LP 1959984)
    - d/p/u/fix-virtiofsd-for-glibc2.35.patch: add rseq to seccomp allow list
    - d/p/u/tcg-Remove-dh_alias-indirection-for-dh_typecode.patch: fix 32bit
      tcg on s390x.
    - Fix diff handling on ceph that can cause data corruption (LP 1968258)
      - d/p/u/lp-1968258-block-rbd-fix-handling-of-holes-in-.bdrv_co.patch
      - d/p/u/lp-1968258-block-rbd-workaround-for-ceph-issue-53784.patch
    - d/p/u/lp-1970563-ui-vnc.c-Fixed-a-deadlock-bug.patch: avoid deadlock
      in vnc connections (LP 1970563)
    - All CVE fixes of 1:6.2+dfsg-2ubuntu8 except CVE-2021-3507
  * Dropped Changes
    - d/p/lp-1952448-relax-skiboot-gcc-deprecation-errors.patch:
      add patch to workaround FTBFS when building against OpenSSL 3.0.
      [ now working with OpenSSL 3.0 ]
    - d/optionrom.mak, d/p/u/avoid-fcf-clashing-with-i486.patch: fix
      -fcf-protection being unavailble on -march=i486 (LP 1940029)
      [ fixed in compiler toolchain ]
    - Make qemu-system-x86-microvm a transitional package as the binary is now
      in qemu-system-x86 itself.
      [ no more needed]
  * Added Changes
    - d/control-in: switch qemu-system-x86-xen to qemu-system-xen as this
      landed in Debian but under a different name.
    - d/p/u/qboot-Disable-LTO-for-ELF-binary-build-step.patch: fix qboot FTBFS
      with LTO
    - d/p/u/lp-1981339-*: fix s390x system emulation (LP: #1981339)

 -- Christian Ehrhardt <email address hidden> Tue, 05 Jul 2022 12:07:19 +0200

Related branches

Changed in qemu (Ubuntu):
assignee: nobody → Christian Ehrhardt  (paelzer)
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

The extra packages in the ecosystem around qemu seem fine.
- virtglrenderer is assigned to bryce and started.
- edk2 and seabios are in sync
- In ipxe we are still ahead and have neither a new upstream release nor urgent requests (can stay as-is)
- libvirt 9.0 isn't released yet, but we are working to get it updated in Debian before the freeze hits.

Extra cases to check in https://bugs.launchpad.net/ubuntu/+source/qemu/+bugs?field.tag=qemu-23.04

Changed in qemu (Ubuntu):
status: New → In Progress
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

There are some build issues with gcc-12 in older code.
I tried without and only keept it applied if still needed.

Droppable now:
- acc58cc2f2 MAYBE-DROP: d/p/u/lp1988710-silence-openbios-array-bounds-false-positive.patch.
- 611d86e4ef MAYBE-DROP: d/rules: set -O1 for alpha firmware build (LP: #1988710)

Still needed:
- 8f2a00ba78 d/p/u/qboot-Disable-LTO-for-ELF-binary-build-step.patch: fix qboot FTBFS with LTO

No response yet by upstream.
Independent to my fix Heinrich wanted to change it in Debian, but we are discussing what/where would be the right fix.
See https://salsa.debian.org/qemu-team/qemu/-/merge_requests/33

Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (9.9 KiB)

This bug was fixed in the package qemu - 1:7.2+dfsg-4ubuntu1

---------------
qemu (1:7.2+dfsg-4ubuntu1) lunar; urgency=medium

  * Merge with Debian unstable (LP: #1993438), among many other fixes
    this resolvs these bugs:
    (LP: #1957924) - support for querying stats,
    (LP: #1853307) - Enhanced Interpretation for PCI Functions (s390x)
    (LP: #1959966) - guest dump encryption with customer keys (s390x)
    (LP: #1999885) - pv: don't allow userspace to set the clock under PV
    (LP: #1957924) - add filtering of statistics by target vCPU
    remaining changes:
    - qemu-kvm to systemd unit
      - d/qemu-kvm-init: script for QEMU KVM preparation modules, ksm,
        hugepages and architecture specifics
      - d/qemu-system-common.qemu-kvm.service: systemd unit to call
        qemu-kvm-init
      - d/qemu-system-common.install: install helper script
      - d/qemu-system-common.qemu-kvm.default: defaults for
        /etc/default/qemu-kvm
      - d/rules: call dh_installinit and dh_installsystemd for qemu-kvm
    - Distribution specific machine type
      (LP: 1304107 1621042 1776189 1761372 1761372 1776189)
      - d/p/ubuntu/define-ubuntu-machine-types.patch: define distro machine
        types containing release versioned machine attributes
      - d/qemu-system-x86.NEWS Info on fixed machine type defintions
        for host-phys-bits=true
      - Add an info about -hpb machine type in debian/qemu-system-x86.NEWS
      - ubuntu-q35 alias added to auto-select the most recent q35 ubuntu type
    - Enable nesting by default
      - d/p/ubuntu/enable-svm-by-default.patch: Enable nested svm by default
        in qemu64 on amd
        [ No more strictly needed, but required for backward compatibility ]
    - tolerate ipxe size change on migrations to >=18.04 (LP: 1713490)
      - d/p/ubuntu/pre-bionic-256k-ipxe-efi-roms.patch: old machine types
        reference 256k path
      - d/control-in: depend on ipxe-qemu-256k-compat-efi-roms to be able to
        handle incoming migrations from former releases.
    - d/qemu-system-x86.README.Debian: add info about updated nesting changes
    - Ease the use of module retention on upgrades (LP 1913421)
      - debian/qemu-block-extra.postinst: enable mount unit on install/upgrade
    - d/control-in: switch qemu-system-x86-xen to qemu-system-xen as this
      landed in Debian but under a different name.
    - Remaining GCC-12 FTBFS (LP 1988710 + LP 1921664)
      + d/p/u/qboot-Disable-LTO-for-ELF-binary-build-step.patch:
        fix qboot FTBFS with LTO
  * Dropped Changes [now part of upstream v7.2.0]
    - d/p/u/lp1994002-migration-Read-state-once.patch: Fix for libvirt
      error 'migration was active, but no RAM info was set' (LP 1994002)
    - d/p/u/ebpf-replace-deprecated-bpf_program__set_socket_filt.patch:
      Fix FTBFS with libbpf 1.0.1-2.
      + Header updates that were added as part of the libbpf fixes
        but not mentioned in changelog
    - d/p/u/lp-1981339-*: fix s390x system emulation (LP 1981339)
    - Fix I/O stalls when using NVMe storage (LP 1970737).
      + d/p/lp1970737-linux-aio-*.patch: Fix unbalanced plugged counter
        in laio_io_unplug.
    - SECURITY UPDATE...

Changed in qemu (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.