On 06.10.2026 11:34, Daniel P. Berrangé wrote:
The following changes since commit d7a65d1793d691d356a56833620f7d1e6f5d653b:
Merge tag 'hppa-a400-updates-pull-request' of
https://github.com/hdeller/qemu-hppa into staging (2026-10-03 14:17:49 +0200)
are available in the Git repository at:
https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request
for you to fetch changes up to f33fb19cab412ffbc19e3b7914a320ae1d73709c:
seccomp: fix blocking of setns/execveat/unshare (2026-10-06 09:17:43 +0100)
----------------------------------------------------------------
Merge USB, I/O and seccomp fixes
* Fix seccomp to use errno action for setns/execveat/unshare
instead of killing the thread
* Improve TLS performance and avoid test suite timeouts by
corking TLS writes to increase packet size
* Fix websocket server unbounded read of client data
CVE-2026-101291
* Avoid use-after-free in MTP device during object delete
----------------------------------------------------------------
Daniel P. Berrangé (3):
io: prevent unbounded read of websocket data from client
io: cork TLS writes to avoid small TLS records
seccomp: fix blocking of setns/execveat/unshare
Tommaso Califano (1):
hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration
I'm picking the 3 out of 4 changes here for qemu-stable - omitting
the "cork" one. Please let me know if I should not.
Thanks,
/mjt
