On Sat, Oct 10, 2026 at 10:29:34AM +0300, Michael Tokarev wrote: > On 06.10.2026 11:34, Daniel P. Berrangé wrote: > > The following changes since commit d7a65d1793d691d356a56833620f7d1e6f5d653b: > > > > Merge tag 'hppa-a400-updates-pull-request' of > > https://github.com/hdeller/qemu-hppa into staging (2026-10-03 14:17:49 > > +0200) > > > > are available in the Git repository at: > > > > https://gitlab.com/berrange/qemu tags/misc-fixes-pull-request > > > > for you to fetch changes up to f33fb19cab412ffbc19e3b7914a320ae1d73709c: > > > > seccomp: fix blocking of setns/execveat/unshare (2026-10-06 09:17:43 > > +0100) > > > > ---------------------------------------------------------------- > > Merge USB, I/O and seccomp fixes > > > > * Fix seccomp to use errno action for setns/execveat/unshare > > instead of killing the thread > > * Improve TLS performance and avoid test suite timeouts by > > corking TLS writes to increase packet size > > * Fix websocket server unbounded read of client data > > CVE-2026-101291 > > * Avoid use-after-free in MTP device during object delete > > > > ---------------------------------------------------------------- > > > > Daniel P. Berrangé (3): > > io: prevent unbounded read of websocket data from client > > io: cork TLS writes to avoid small TLS records > > seccomp: fix blocking of setns/execveat/unshare > > > > Tommaso Califano (1): > > hw/usb: Fix USB MTP Use-After-Free in usb_mtp_deletefn List Iteration > > I'm picking the 3 out of 4 changes here for qemu-stable - omitting > the "cork" one. Please let me know if I should not.
I'd recommend taking the cork one too. The migration qtest suite will randomly throw timeouts without that, as it sometimes get into a "go slow" state with the nagle algorithm, which the corking avoids. With regards, Daniel -- |: https://berrange.com ~~ https://hachyderm.io/@berrange :| |: https://libvirt.org ~~ https://entangle-photo.org :| |: https://pixelfed.art/berrange ~~ https://fstop138.berrange.com :|
