The following changes since commit d7a65d1793d691d356a56833620f7d1e6f5d653b:
Merge tag 'hppa-a400-updates-pull-request' of https://github.com/hdeller/qemu-hppa into staging (2026-10-03 14:17:49 +0200) are available in the Git repository at: https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request for you to fetch changes up to f33fb19cab412ffbc19e3b7914a320ae1d73709c: seccomp: fix blocking of setns/execveat/unshare (2026-10-06 09:17:43 +0100) ---------------------------------------------------------------- Merge USB, I/O and seccomp fixes * Fix seccomp to use errno action for setns/execveat/unshare instead of killing the thread * Improve TLS performance and avoid test suite timeouts by corking TLS writes to increase packet size * Fix websocket server unbounded read of client data CVE-2026-101291 * Avoid use-after-free in MTP device during object delete ---------------------------------------------------------------- Daniel P. Berrangé (3): io: prevent unbounded read of websocket data from client io: cork TLS writes to avoid small TLS records seccomp: fix blocking of setns/execveat/unshare Tommaso Califano (1): hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration crypto/tlssession.c | 45 +++++++++++++++++++ hw/usb/dev-mtp.c | 4 +- include/crypto/tlssession.h | 25 +++++++++++ include/io/channel-tls.h | 1 + io/channel-tls.c | 87 ++++++++++++++++++++++++++++++++++--- io/channel-websock.c | 4 +- system/qemu-seccomp.c | 15 +++++-- 7 files changed, 169 insertions(+), 12 deletions(-) -- 2.55.0
