This package contains a module for doing Spice based UI for QEMU.
Provides
Requires
License
BSD-2-Clause AND BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT
Changelog
* Thu Oct 01 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.1.2)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260929144512.126747-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/sh4: Replace TB_FLAG_GUSA_EXCLUSIVE with CF_STEP_ATOMIC
accel/tcg: Set CF_NOIRQ during cpu_exec_step_atomic
linux-user/sh4: align the vdso sigreturn trampolines
linux-user/sh4: fix vdso CFA for rt_sigreturn frames
linux-user/sh4: use the kernel's sigreturn trampoline sequence in the vdso
target/i386: Mark MOVNTI as not valid with prefixes 0x66, 0xF2, 0xF3
target/i386: Update FPU tag word for FXCH
target/i386: Update FPU tag word for FSTP
target/i386: Update FPU tag word for FXTRACT's old ST(0)
target/i386: Fix FXCH to unconditionally clear C1
target/ppc: Stop vCPU thread before calling parent_unrealize
tests/qtest/usb-hcd-xhci: test isoch endpoint type mismatch
tests/qtest/usb-hcd-xhci: test isoch pacing with MFINDEX above 2^32
hw/usb/hcd-xhci: don't assert on NAK when retrying an isoch transfer
hw/usb/hcd-xhci: fix interval alignment after MFINDEX passes 2^32
hw/usb/hcd-xhci: Set reentrancy guard in timer functions (CVE-2026-17588)
tcg/riscv64: Set vtype before whole-register vector loads
tests/tcg/s390x: Add regression test for #4449
tcg/optimize: Fix expansion/simplification of deposit
tests/tcg/arm: Add regression test for #4448
tcg/optimize: Fix fold_multiply2 vs 1
accel/tcg: Fix TLB_MMIO check in tlb_plugin_lookup()
accel/tcg: Use TLB_FORCE_SLOW not TLB_MMIO for system plugins
hw/9pfs: mutate FID path from main thread only (CVE-2026-93834)
s390x/pci: fix DMA slot leak on I/O TLB entry replacement
hw/s390x/ipl: Fix incorrect PCI IPL block lengths
linux-user/loongarch64: Detect vector stores in host_signal_write()
linux-user: implement mlock2(2) syscall
linux-user/riscv: honor zicntrúlse for base counterCSRs
system/ram-discard-manager: fix offset_within_address_space in replay_by_populated_state()
igvm: mark qigvm_find_param_entry as static
igvm: validate and honor byte_offset in parameter directives
hw/uefi: add missing uefi_str_is_valid check to uefi_vars_mm_lock_variable
target/loongarch: Fix data race in CSR_ESTAT
hw/riscv/virt.c: fix aclint soc/mtimer nodename
target/arm/hvf: implement MDCCSR_EL0 as RAZ
target/arm/whpx: fix whpx-arm post-reset CPU state
target/arm/whpx: incorrect ENCODE_AA64_CP_REG parameter order
target/arm/whpx: Don't try to sync ARM_CP_CONST registers
hw/intc/bcm2835_ic: reject out-of-range FIQ source values
qga: Change effective user/group ID in guest-ssh-* commands
vhost-user-gpu: validate command buffer size in submit_3d
ui/cursor: make the cursor refcount atomic
hw/display/qxl: hold ssd.lock while replacing ssd.cursor
hw/cxl: fix the CDAT DOE overlapping the Flex Bus DVSEC when sn= is set
virtio-scsi: set dataplane_started to false upon failure
virtio-balloon: fix free-page BH teardown on unrealize
hw/virtio: reject inverted virtio-iommu IOVA ranges
hw/net/virtio-net: strip trailing padding when caching RSC segment
hw/net/virtio-net: check packet size before VLAN tag access in receive_filter()
qapi/misc: Fix missed query-iothreads items
hw/cxl: Fix guest-triggerable QEMU exit on reserved interleave ways
virtio-gpu: clear res->blob on mapping cleanup
* Wed Sep 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Bugfixes and (spec-file) improvements:
* vapic: confine the VAPIC region to 0xc0000..0xe0000 (bsc#1282077, CVE-2026-81627)
* hw/9pfs: mutate FID path from main thread only (bsc#1282578, CVE-2026-93834)
* [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918)
* [openSUSE][RPM] spec: stub out all iotests when running under user emulation (e.g., for riscv64)
* target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864)
* target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864)
* linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864)
* file-posix: Tolerate unaligned hole at middle (bsc#1277435)
* [openSUSE][RPM] spec: skip the tests that require get_mempolicy under linux-user
* [openSUSE][RPM] build all firmware on riscv64 and fix user tests
* Fri Sep 04 2026 Dario Faggioli <dfaggioli@suse.com>
- Bugfixes (bsc#1277435, bsc#1263864):
* file-posix: Tolerate unaligned hole at middle (bsc#1277435)
* target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864)
* target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864)
* linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864)
* Thu Sep 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Improve riscv64 handling:
* [openSUSE][RPM] build all firmware on riscv64 and fix user tests
* [openSUSE][RPM] spec: stub out all iotests when running under user
emulation (e.g., for riscv64)
* Thu Sep 03 2026 Dario Faggioli <dfaggioli@suse.com>
- Fix broken build on aarch64:
* [openSUSE][RPM] spec: disable GCS linker validation on aarch64
- Update to latest stable release (11.1.1)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260827155607.639070-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/riscv/tcg: sret in virtual user mode raises virtual instruction exception
target/riscv: Allow UXL to be 3 in mstatus on rv128
target/riscv: Restore register dump zero padding
tests/qtest: remove trace output from k230 watchdog test
target/riscv: enforce even register constraints for Zdinx fcvt pairs
target/riscv: reject FMV.X.W/FMV.W.X under Zfinx
target/riscv: honor zicbo* envcfg gating in linux-user mode
disas/riscv: Fix typo in th.lbib format
disas/riscv: Fix isa decoding of rev8
disas/riscv: Fix rv32 encoding of zext.h
target/riscv: allow menvcfg/henvcfg LPE and SSE bits on RV32
hw/riscv/riscv-iommu: preserve requested perm in spa_fetch()
hw/riscv/riscv-iommu: fix U-bit check to apply only to leaf S/VS-stage PTEs
disas/riscv: Decode unsigned vector immediates as unsigned
disas/riscv: Use signed type for vector immediates
disas/riscv: Fix 6-bit immediate extraction
disas/riscv: Fix th.srri decoding
tests/qtest: Add seed CSR zero extension test
target/riscv: Fix seed CSR sign extension
target/riscv: do not count ECALL in minstret
target/riscv: Fix memory leak in riscv_trigger_unrealize()
target/riscv: use SXL instead of MXL for read_sstatus
target/riscv: Fix PC sync in trans_sspopchk for CFI exception handling
whpx: i386: inject back db
whpx: i386: work around Hyper-V FP state oddities
whpx: i386: synchronise PAT too
whpx: i386: enable fast hypercall output
hw/i386: fw_cfg: do not set VMX feature control on WHPX
whpx: i386: fix xsaves enablement in legacy probing path
hw/watchdog: Add lower bound check for watchdogNumber
tests/tcg/aarch64: Add regression test for whilewr/whilerw
target/arm: Fix SVE2 WHILEWR/WHILERW zero diff boundary case
tcg: Export tcg_gen_ussub_i{32,64,tl}
hw/intc/arm_gicv3: Have GIC kconfig select GICv3 for HVF and WHPX
hw/intc: Fix arm kvm gicv3 selection
tcg: Defer tb_flush when initial thread region alloc fails
tcg: Return success from tcg_region_alloc
tcg: Return success from tcg_region_alloc__locked
target/loongarch: check FPE before reading fcc in bceqz/bcnez
meson: make linker warnings non-fatal on Linux
serial: clear transmit retry callback on unrealize
...
* Mon Aug 24 2026 Dario Faggioli <dfaggioli@suse.com>
- Revisit the fix for bsc#1232712:
* hw/display/xenfb: always register vfb and allocate console early (bsc#1232712)
- Switch to ipxe-qemu:
* [openSUSE][RPM] spec: stop building edk2-basetools and ipxe
- Upgrade to version 11.1.0
The full list of changes are available at:
https://wiki.qemu.org/ChangeLog/11.1
Highlights include:
* Universal Flash Storage (UFS) emulation support for Write Booster
(device-level caching) and Host-Initiated Defragmentation (HID) based
on UFS 4.1 specification
* vhost-host-user support for offloading real-time clock handling from
the hypervisor when using virtio-rtc
* GUI: improvements to virtual console handling/specifying of different
character encoding and GTK/VNC improvements as well
* ARM: support for new architectural CPU features (too many to list
here, see full changelog)
* ARM: support for new imx8mp-evk machine type (based on i.MX 8MM
Evaluation kit)
* ARM: 'virt' board support for specifying cache topology, 'hvf'
accelerator now supports nested virtualization and vGIC
* HPPA: updated to SeaBIOS-hppa v25 firmware, TLB insert fixes for
HP-UX 9
* PowerPC: MPIPL support for PowerNV to preserve memory after an
unexpected reset, as well as support for emulating a nest MMU
* RISC-V: ISA exstention support for big-endian, Zbr/xbr0p93, Zvfbfa,
fractional LMUL on vector SHA instructions, KVM support for Zicbop
and BFloat16 extensions, and more
* RISC-V: new board support for K230, support for Tenstorrent mvendorid,
and other misc. fixes/features
* s390x: KVM support for ASTFLE facility 2 (for nested)
* and lots more...
* Thu Jul 30 2026 Dario Faggioli <dfaggioli@suse.com>
- (Properly, this time for real) fix bsc#1268245:
* [openSUSE][RPM] spec: properly fix bsc#1268245 (this time for real!)
* Thu Jul 30 2026 Dario Faggioli <dfaggioli@suse.com>
- Update to latest stable release (11.0.3)
Full backport list here:
https://lore.kernel.org/qemu-devel/20260725052155.1228635-1-mjt@tls.msk.ru/
A selection of them is reported here below:
target/arm: do not clear halting reason in has_work helper
target/arm: teach arm_cpu_has_work about halting reasons
hw/audio/intel-hda: restrict all DMA engine paths to memories
hw/net/cadence: Return current Cadence GEM queue pointers
hw/misc/applesmc: Fix a typo setting MSSD key
replay: fix use of uninitialized pointer on error
hw/display/qxl: validate monitors_config heads[] in phys2virt
net: Correct padding check in qemu_receive_packet()
hw/net/xilinx_axienet: Fix PHY register 17 link status reporting
hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise()
hw/usb/hcd-xhci: Fix guest-triggerable assert() in xhci_find_stream()
usbredir: fix infinite loop and SIGFPE with zero max_packet_size
usbredir: fix use-after-free on buffered bulk packet overflow
tests/qtest: add xhci-pci unplug finalize regression test
hw/usb/hcd-xhci-pci: break host link cycle so device_finalize() runs on unplug
hw/usb/xhci: clamp interval exponent to avoid UB shift in xhci_init_epctx()
accel/tcg: move jit thread manipulation into do_tb_phys_invalidate
hw/display/virtio-gpu: Check pixman_image_create_bits() results
hw/display/virtio-gpu: handle migration iov allocation failure
hw/display/virtio-gpu: cap submit_3d command buffer allocation
ui/vnc: validate SetPixelFormat field ranges
ui/vnc: fix out-of-bounds write in lossy refresh dirty marking
ui/gtk: Narrow DMA-BUF critical section
ui/input-barrier: fix off-by-one in keycode bounds check
ui/vnc: validate color shifts in SetPixelFormat
ui/vnc: fix OOB write in vnc_refresh_lossy_rect
net: only advertise passt in netdev help when CONFIG_PASST
hw/usb/hcd-xhci: Turn guest-triggerable abort() into qemu_log_mask()
hw/usb/hcd-ohci: Make sure that ohci_service_ed_list() cannot loop forever
hw/display/virtio-gpu: fix dmabuf_fd leak on remap failure
hw/scsi/vmw_pvscsi: add a comment to explain the endianness
hw/scsi/vmw_pvscsi: translate data endianness
hw/sparc64/niagara: use int64_t for vdisk size to avoid truncation
hw/display/qxl: fix TOCTOU in cursor chunk data_size handling
hw/misc/ivshmem: clear chardev handlers before freeing peers
linux-user/alpha: populate AT_HWCAP from env->amask
linux-user/alpha: add coredump support
s390x/css: firm up handling of chained TIC CCWs
s390x/sclpcpi: check event length field before reading from buffer
s390x/sclp: prevent re-reading the sclp header
hw/misc/stm32_rcc: Correct offset-to-irq calculation
hw/display/sm501: Don't allow guest to set ram size