similarity index 99%
rename from meta/recipes-devtools/qemu/qemu-native_11.1.2.bb
rename to meta/recipes-devtools/qemu/qemu-native_11.1.3.bb
@@ -7,3 +7,4 @@ require qemu-native.inc
EXTRA_OECONF:append = " --target-list=${@get_qemu_usermode_target_list(d)} --disable-tools --disable-install-blobs --disable-guest-agent"
PACKAGECONFIG ??= "pie"
+
similarity index 99%
rename from meta/recipes-devtools/qemu/qemu-system-native_11.1.2.bb
rename to meta/recipes-devtools/qemu/qemu-system-native_11.1.3.bb
@@ -26,3 +26,4 @@ do_install:append() {
rm -rf ${D}${datadir}/icons/
rm -rf ${D}${includedir}/qemu-plugin.h
}
+
@@ -43,7 +43,7 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \
UPSTREAM_CHECK_URI = "https://www.qemu.org"
UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar"
-SRC_URI[sha256sum] = "731b5681e4bb18be313231579b8efd0296c5b015fa36dc533874b639ba838016"
+SRC_URI[sha256sum] = "5a8289c7940dc77d3873c81a6c29ba3afe1446fc9d36e77fa1658cdbecb84b22"
CVE_STATUS[CVE-2007-0998] = "not-applicable-config: The VNC server can expose host files uder some circumstances. We don't enable it by default."
@@ -1,4 +1,4 @@
-From 76727fef9006b0936846938b6f8bbbccd829a75f Mon Sep 17 00:00:00 2001
+From f6981f9aedd718c2f908a91be70bb58c9473eaa0 Mon Sep 17 00:00:00 2001
From: Jason Wessel <jason.wessel@windriver.com>
Date: Fri, 28 Mar 2014 17:42:43 +0800
Subject: [PATCH] qemu: Add addition environment space to boot loader
@@ -1,7 +1,7 @@
-From 8507fd6795753697f557d11e144568f1bf8a00cb Mon Sep 17 00:00:00 2001
+From d8aae0e53cee8810167f7718704e2adcd67b1f0f Mon Sep 17 00:00:00 2001
From: Trevor Gamblin <tgamblin@baylibre.com>
Date: Mon, 24 Aug 2026 17:54:21 +0000
-Subject: [PATCH 1/3] target/riscv: extract sfence_vma_allowed() from
+Subject: [PATCH] target/riscv: extract sfence_vma_allowed() from
helper_tlb_flush()
Create a new function to encapsulate the privilege/hypervisor checks
@@ -16,7 +16,7 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
1 file changed, 13 insertions(+), 6 deletions(-)
diff --git a/target/riscv/tcg/op_helper.c b/target/riscv/tcg/op_helper.c
-index 3e94005d2b..8039df2b48 100644
+index 3e94005d2..8039df2b4 100644
--- a/target/riscv/tcg/op_helper.c
+++ b/target/riscv/tcg/op_helper.c
@@ -588,18 +588,25 @@ void helper_wrs_nto(CPURISCVState *env)
@@ -51,6 +51,3 @@ index 3e94005d2b..8039df2b48 100644
}
}
-2.55.0
-
@@ -1,4 +1,4 @@
-From bbd0cb5705e5dff0c4ad54c957f6f6d4617ad174 Mon Sep 17 00:00:00 2001
+From b5dd7847f0bd0f527b5ff9c9f69df5cd80108287 Mon Sep 17 00:00:00 2001
From: Alexander Kanavin <alex@linutronix.de>
Date: Wed, 10 Jun 2026 15:00:26 +0200
Subject: [PATCH] ui/sdl2.c: force-disable SDL_HINT_VIDEO_X11_FORCE_EGL,
@@ -1,4 +1,4 @@
-From a499a56467f56f362c4a7e31d64265a47faefacb Mon Sep 17 00:00:00 2001
+From 8f0419ee02d265c0c92686b88053f08a99d113bf Mon Sep 17 00:00:00 2001
From: Mark Asselstine <mark.asselstine@windriver.com>
Date: Tue, 26 Feb 2013 11:43:28 -0500
Subject: [PATCH] apic: fixup fallthrough to PIC
@@ -1,7 +1,7 @@
-From eb8773847363989d9396492a3c9bc517ca04959f Mon Sep 17 00:00:00 2001
+From a6da8e0d87a06e2ed39e3fe37693fb3335a3bb39 Mon Sep 17 00:00:00 2001
From: Trevor Gamblin <tgamblin@baylibre.com>
Date: Mon, 24 Aug 2026 17:54:45 +0000
-Subject: [PATCH 2/3] target/riscv: add helper_tlb_flush_page()
+Subject: [PATCH] target/riscv: add helper_tlb_flush_page()
Add a page-level counterpart to helper_tlb_flush(), and condition its
internal call to tlb_flush_page() on return value from the new
@@ -16,10 +16,10 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
2 files changed, 8 insertions(+)
diff --git a/target/riscv/helper.h b/target/riscv/helper.h
-index 4fc2d3a155..652f85a5c7 100644
+index 542b7c264..2b88888f8 100644
--- a/target/riscv/helper.h
+++ b/target/riscv/helper.h
-@@ -137,6 +137,7 @@ DEF_HELPER_1(ctr_clear, void, env)
+@@ -138,6 +138,7 @@ DEF_HELPER_1(ctr_clear, void, env)
DEF_HELPER_1(wfi, void, env)
DEF_HELPER_1(wrs_nto, void, env)
DEF_HELPER_1(tlb_flush, void, env)
@@ -28,7 +28,7 @@ index 4fc2d3a155..652f85a5c7 100644
DEF_HELPER_4(ctr_add_entry, void, env, tl, tl, tl)
/* Native Debug */
diff --git a/target/riscv/tcg/op_helper.c b/target/riscv/tcg/op_helper.c
-index 8039df2b48..723a45d181 100644
+index 8039df2b4..723a45d18 100644
--- a/target/riscv/tcg/op_helper.c
+++ b/target/riscv/tcg/op_helper.c
@@ -610,6 +610,13 @@ void helper_tlb_flush(CPURISCVState *env)
@@ -45,6 +45,3 @@ index 8039df2b48..723a45d181 100644
void helper_tlb_flush_all(CPURISCVState *env)
{
CPUState *cs = env_cpu(env);
-2.55.0
-
@@ -1,8 +1,8 @@
-From 858d6d9a587e4ed44f92e017375c5265bc40934b Mon Sep 17 00:00:00 2001
+From e53b203900cd5d04ac938b1ff4643667b6b63efa Mon Sep 17 00:00:00 2001
From: Trevor Gamblin <tgamblin@baylibre.com>
Date: Mon, 24 Aug 2026 17:55:00 +0000
-Subject: [PATCH 3/3] target/riscv: use a targeted TLB page flush for
- sfence.vma with a vaddr operand
+Subject: [PATCH] target/riscv: use a targeted TLB page flush for sfence.vma
+ with a vaddr operand
sfence.vma unconditionally called helper_tlb_flush(), regardless of the
rs1 (vaddr) and rs2 (asid) operands, forcing a page-table walk on the
@@ -26,10 +26,10 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/target/riscv/tcg/insn_trans/trans_privileged.c.inc b/target/riscv/tcg/insn_trans/trans_privileged.c.inc
-index a8eaccef67..8655fa332e 100644
+index ebbbb0117..2b1bb83bf 100644
--- a/target/riscv/tcg/insn_trans/trans_privileged.c.inc
+++ b/target/riscv/tcg/insn_trans/trans_privileged.c.inc
-@@ -155,7 +155,11 @@ static bool trans_sfence_vma(DisasContext *ctx, arg_sfence_vma *a)
+@@ -156,7 +156,11 @@ static bool trans_sfence_vma(DisasContext *ctx, arg_sfence_vma *a)
{
#ifndef CONFIG_USER_ONLY
decode_save_opc(ctx, 0);
@@ -42,6 +42,3 @@ index a8eaccef67..8655fa332e 100644
return true;
#endif
return false;
-2.55.0
-
@@ -1,4 +1,4 @@
-From e9a86f3bd5392b12baddb9ee65335c9cda3cad56 Mon Sep 17 00:00:00 2001
+From d0aa68698cf780fac8be2b05a422a85b33b7d57a Mon Sep 17 00:00:00 2001
From: Oleksiy Obitotskyy <oobitots@cisco.com>
Date: Wed, 25 Mar 2020 21:21:35 +0200
Subject: [PATCH] qemu: Do not include file if not exists
@@ -16,7 +16,7 @@ Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
1 file changed, 2 insertions(+)
diff --git a/linux-user/syscall.c b/linux-user/syscall.c
-index cfa68dfbd..ab2cecbfb 100644
+index 9f454502c..99d433cea 100644
--- a/linux-user/syscall.c
+++ b/linux-user/syscall.c
@@ -117,7 +117,9 @@
@@ -1,4 +1,4 @@
-From f92e779a55ab3e5d14884a4ea55369f7a16923d3 Mon Sep 17 00:00:00 2001
+From b0aea2f36b662c3089f509bfdfcfb526a11a5a8d Mon Sep 17 00:00:00 2001
From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Fri, 8 Jan 2021 17:27:06 +0000
Subject: [PATCH] qemu: Add some user space mmap tweaks to address musl 32 bit
@@ -1,4 +1,4 @@
-From 3186be2d62be9211bdb63fd2c2bc201567c72a2e Mon Sep 17 00:00:00 2001
+From a1e90f7dea2ec307ea7e3360ad83cfcb4198e3a9 Mon Sep 17 00:00:00 2001
From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Mon, 1 Mar 2021 13:00:47 +0000
Subject: [PATCH] qemu: Determinism fixes
@@ -1,4 +1,4 @@
-From ae3bcb46784c43ba99e2e52bd38fea7cbc79543e Mon Sep 17 00:00:00 2001
+From 87302d3f04a325002cb9af880e49c94bf37855f6 Mon Sep 17 00:00:00 2001
From: Changqing Li <changqing.li@windriver.com>
Date: Thu, 14 Jan 2021 06:33:04 +0000
Subject: [PATCH] tests/meson.build: use relative path to refer to files
@@ -21,10 +21,10 @@ Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/tests/unit/meson.build b/tests/unit/meson.build
-index dc3fb954c..914845b22 100644
+index 885df4c0d..588098093 100644
--- a/tests/unit/meson.build
+++ b/tests/unit/meson.build
-@@ -127,17 +127,17 @@ endif
+@@ -128,17 +128,17 @@ endif
if have_system
tests += {
@@ -1,4 +1,4 @@
-From 0999c002153ab64befd3df4c5f35dbe3611d137f Mon Sep 17 00:00:00 2001
+From cfe68e5df5202b55225a607e85d9929835bd52fc Mon Sep 17 00:00:00 2001
From: Khem Raj <raj.khem@gmail.com>
Date: Mon, 21 Mar 2022 10:09:38 -0700
Subject: [PATCH] Define MAP_SYNC and MAP_SHARED_VALIDATE on needed linux
@@ -1,4 +1,4 @@
-From 13b84f40e56cf70d0a74a2a9fb51161b041a31bf Mon Sep 17 00:00:00 2001
+From 98b273b23aa857f10a4c27c1e12ff4d682d6051b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Martin=20Hundeb=C3=B8ll?= <martin@geanix.com>
Date: Wed, 22 May 2024 14:02:55 +0200
Subject: [PATCH] configure: lookup meson exutable from PATH
@@ -1,4 +1,4 @@
-From 9b01ec57a976ed9e3b66f2ffbe5547ad9d0b05c8 Mon Sep 17 00:00:00 2001
+From 72842f2d3c17a6fbad4b06c4927a7dc9ba637c85 Mon Sep 17 00:00:00 2001
From: Richard Purdie <richard.purdie@linuxfoundation.org>
Date: Wed, 22 May 2024 13:58:23 +0200
Subject: [PATCH] qemu: Ensure pip and the python venv aren't used for meson
similarity index 100%
rename from meta/recipes-devtools/qemu/qemu_11.1.2.bb
rename to meta/recipes-devtools/qemu/qemu_11.1.3.bb
git log --oneline v11.1.2...v11.1.3 005c61c0ef (tag: v11.1.3, origin/staging-11.1, origin/stable-11.1) Update version for 11.1.3 release 8bee8b3dff target/ppc: Name the EBB exceptions 23b370b21c hw/intc/exynos4210_combiner: Fix group register range check b8eb59ff60 hw/misc/bcm2835_cprman: Treat invalid clock mux source select as GND d8cc56e9a2 hw/usb/hcd-xhci: More reentrancy guard fixes for the XHCI code 6700316248 hw/usb/dev-mtp: Fix heap OOB read in usb_mtp_write_metadata() 1c3e688b18 hw/usb/dev-mtp: Fix assert crash on short CMD_SEND_OBJECT 2aba176fe2 usb-host: delete bottom halves during unrealize dc73ad7812 usb-host: free request on libusb submit failure 3f0eeebc80 tests/qtest/usb-hcd-xhci: test interrupt pacing above 2^32 36f13dafeb usb-host: free configuration descriptors on error paths a2a1a95490 usb-host: validate interface number before indexing altsetting 9369434a30 tests/qtest: Cover OHCI endpoint type mismatches e118248d9c hw/usb/hcd-ohci: Fail iso packets sent to non-iso endpoints and vice-versa 483db5ddb1 hw/usb/dev-mtp: Fix assert crash on undersized BULK IN 5a7758d6d2 hw/uefi: fix ContentInfo detection in wrap_pkcs7() 31e4c99baf hw/9pfs: fix dirent stream protection for legacy (9p2000.u) Tread 2d494acdbb iotests/migrate-bitmaps-postcopy-test: add a bitmap on a second node 62f725bd36 migration/block-dirty-bitmap: fix postcopy abort with bitmaps on several nodes 1b4a401991 migration: add QEMU_COUNTED_STRING_SIZE for counted string buffers b66ab958d9 qemu-img: convert: flush target image after copying 630d9dc82d block: report flush error during bdrv_close() 34d8b6d870 iotests.py: add filter_qemu() 7819c7705c iotests: add test cases for failing flush after qemu-img convert 7450360e8c seccomp: really fix blocking of setns/execveat/unshare 8a9f2a0b58 seccomp: fix blocking of setns/execveat/unshare f207638c13 target/riscv: Check Svnapot PTE before updating A/D bits 37fe6b6ad9 tests/qtest/bios-tables-test: Update riscv64 virt SPCR golden reference 278e3552ef hw/riscv/virt-acpi-build: Fix the UART register width in SPCR 1af8e99822 tests/qtest/bios-tables-test: Allow changes to riscv64 virt SPCR 55dd6122c1 target/riscv/kvm: Preserve VCSR across migration 249e18c875 target/riscv/kvm: Reject migration with a different timer frequency fb28041443 target/riscv/kvm: Preserve FCSR across migration 6b6a519e4d targetriscv: svinval instructions raise virtual instruction exception 963eb3cb85 target/riscv: stop translating after WFI 75213859c7 target/riscv: Restore LCOFI handling in interrupt CSRs ddf0161016 target/riscv: check G-stage write permission for VS-stage A/D updates e89003d149 hw/intc/arm_gicv5: Make IRS_IDR0 reads return actual value, not 0 d2dd4bce25 tests/tcg/aarch64: Test the TTBR layout with TCR.DS and a 48-bit OA cfadd7fdf5 target/arm: Use the 52-bit TTBR base address layout when TCR.DS is set 31fbb602c5 tests/tcg/aarch64: Add a test for a two-entry 52-bit TTBR table 3c4032504f target/arm: Clear TTBR[5:0] from a 52-bit table base address b77e390869 tcg/riscv64: Remove vector min/max ops with immediates dc0b14e474 target/i386: fix immediate stack adjustment for RET and RETF 621f9b0e99 target/i386/tcg: zero FXSAVE FOP and reserved slot bytes ae1a7e175b tests/tcg: Add tests for sign extension after rotate 3edfef095f tcg/optimize: Do not derive s_mask from rotated s_mask 64c20eeb99 hw/display/vga: fix OOB writes after external surface resize 770b7d4183 hw/tpm: crb: Do not clear internal buffers when backend is busy 04fb445f8e tpm_emulator: Reject sending commands smaller than the request header 8bd96336c6 io: cork TLS writes to avoid small TLS records c33ab7340e block: Remove now redundant bdrv_wait_serialising_requests() calls 7e6a8d069f block: Fix corruption from broken RMW atomicity 4675afbab6 block: reject a reopen of an unusable node instead of crashing b2d517fd06 qcow2: do not clear the dirty bit when reopening a read-only node 4fac279346 file-posix: add statx(STATX_DIOALIGN) support ef1dbcfe6e block: fix bdrv_next() skipping monitor-owned nodes 318b364473 iotests: cover inactivating a read-only node 3247ea7238 block/throttle-groups: fix crash when enabling I/O limits on a busy disk 68df2cefcf io: prevent unbounded read of websocket data from client 6b85309dde hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration b8d45ea45c target/i386/tcg: ignore VEX.L for unary scalar instructions 6cc067b1d9 accel/kvm: coalesced mmio: check lenght of the MMIO write entry fac3798546 accel/kvm: protect kvm_resample_fd_list with a mutex 3cbe6da76c system: fix buffer overflow in tdx_parse_panic_message 07a6c20669 target/i386: Don't clear C1 for FCOMI/FCOMIP/FUCOMI/FUCOMIP cea26d6f83 target/i386: clear C1 for all x87 compare instructions 8230b4093f target/i386: Migrate error code only with an exception 5af7f730e7 target/i386/tcg: raise #GP(0) on null SS load with RPL != CPL 53b291c4db plugins: fix register handle encoding to reserve NULL as invalid 7c5695d0e8 hw/nvme: fix memory leak on sr-iov capable nvme controller removal 7818b0d11f hw/nvme: fix assertion failure on sr-iov capable nvme controller removal 0024528af5 block/nbd: clear reply.cookie under receive_mutex ac398d68a2 block/nbd: never index requests[] with an unchecked cookie 519986cdb5 block/nbd: clear reply.cookie when the reply is rejected dd4b12f00f hw/display/qxl: trace skipped stale loadvm commands 8c3e766357 hw/display/qxl: validate replayed commands in qxl_post_load 13ec396242 hw/display/qxl: factor out qxl_guest_phys2virt() 422e508cf9 migration: Introduce VMStateStructMember 5f3dbb56bf virtio-gpu: disable blob scanouts on mapping cleanup 58486a587f hw/usb/dev-smartcard-reader: validate migrated fields in post_load bf66c153ac hw/usb/dev-smartcard-reader: decode bulk-out length as little-endian 67cd05f4bb hw/usb/dev-smartcard-reader: fix assert on pending answers overflow 43a624d275 hw/usb/dev-smartcard-reader: fix OOB read from pending bulk-in ring 4823a3093b hw/usb/dev-smartcard-reader: validate interrupt transfer length c9267a193b s390x/pci: Reject apertures beyond IOAT capacity in translation mode eb77a720b2 s390x/pci: Use qemu_log_mask() for guest-triggered errors in reg_ioat() 049f614dcb s390x/pci: Fix frame stepping in rpcit_service_call() 4f66512c34 s390x/sclp: Reject short headers in PV case 8c33176cf2 s390x/css: Use datastream pointer for checking no-data CCWs c8766cac23 hw/intc/s390x: Fix check after g_try_realloc ac7504ad5e vfio/ap: Clear error object pointer after non-fatal errors 41d9159113 virtio-ccw: Fix rc check in read configuration path 0cb9e2c7dd virtio-ccw: Do not overwrite existing indicators 163e73e175 virtio-ccw: Limit ISC to MAX_ISC 65edcf1172 hw/usb/hcd-xhci: Limit DMA transfers to plain memory 54d855918e target/arm: Fix WFxT timeouts when the offset puts the count ahead 6c3dceb731 target/arm: Fix next timer tick when the offset puts the count ahead 6e97486987 target/arm: Fix PMSAv8 shareability decode for R-profile MPU regions - Rrefresh exisiting patches Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech> --- ...{qemu-native_11.1.2.bb => qemu-native_11.1.3.bb} | 1 + ...ative_11.1.2.bb => qemu-system-native_11.1.3.bb} | 1 + meta/recipes-devtools/qemu/qemu.inc | 2 +- ...ddition-environment-space-to-boot-loader-q.patch | 2 +- ...cv-extract-sfence_vma_allowed-from-helper_.patch | 9 +++------ ...force-disable-SDL_HINT_VIDEO_X11_FORCE_EGL.patch | 2 +- .../qemu/0002-apic-fixup-fallthrough-to-PIC.patch | 2 +- ...002-target-riscv-add-helper_tlb_flush_page.patch | 13 +++++-------- ...cv-use-a-targeted-TLB-page-flush-for-sfenc.patch | 13 +++++-------- ...004-qemu-Do-not-include-file-if-not-exists.patch | 4 ++-- ...ome-user-space-mmap-tweaks-to-address-musl.patch | 2 +- .../qemu/qemu/0006-qemu-Determinism-fixes.patch | 2 +- ...n.build-use-relative-path-to-refer-to-file.patch | 6 +++--- ..._SYNC-and-MAP_SHARED_VALIDATE-on-needed-li.patch | 2 +- ...-configure-lookup-meson-exutable-from-PATH.patch | 2 +- ...e-pip-and-the-python-venv-aren-t-used-for-.patch | 2 +- .../qemu/{qemu_11.1.2.bb => qemu_11.1.3.bb} | 0 17 files changed, 29 insertions(+), 36 deletions(-) rename meta/recipes-devtools/qemu/{qemu-native_11.1.2.bb => qemu-native_11.1.3.bb} (99%) rename meta/recipes-devtools/qemu/{qemu-system-native_11.1.2.bb => qemu-system-native_11.1.3.bb} (99%) rename meta/recipes-devtools/qemu/{qemu_11.1.2.bb => qemu_11.1.3.bb} (100%)