qemu-linux-user-9.2.4-150700.3.5.1

- Fix the *-video-gpu-ccw package not being present in products:
  * [openSUSE] rpm/spec: go back to only Recommending -video-gpu-ccw for s390x

- Update to version 9.2.4:
  Full backport list here:
  https://lore.kernel.org/qemu-devel/1748499681.325917.13073.nullmailer@localhost/
  Highlights include:
  * target/hppa: Fix FPE exceptions
  * linux-user/hppa: Send proper si_code on SIGFPE exception
  * target/hppa: Copy instruction code into fr1 on FPU assist fault
  * migration: Allow caps to be set when preempt or multifd cap enabled
  * qapi/misc-target: Fix the doc to distinguish query-sgx and query-sgx-capabilities
  * hw/pci-host: Remove unused pci_host_data_be_ops
  * hw/pci-host/gt64120: Fix endianness handling
  * target/riscv/kvm: add kvm_csr_cfgs[]
  * target/riscv/kvm: turn kvm_riscv_reg_id_ulong() into a macro
  * target/riscv/kvm: turn u32/u64 reg functions into macros
  * target/riscv/kvm: fix leak in kvm_riscv_init_multiext_cfg()
  * target/riscv: Fix vslidedown with rvv_ta_all_1s
  * target/riscv: Fix the rvv reserved encoding of unmasked instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector indexed load/store instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector narrow/widen instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vector integer extension instructions(OPMVV)
  * target/riscv: rvv: Apply vext_check_input_eew to vector slide instructions(OPIVI/OPIVX)
  * target/riscv: rvv: Apply vext_check_input_eew to OPIVV/OPFVV(vext_check_sss) instructions
  * target/riscv: rvv: Apply vext_check_input_eew to OPIVI/OPIVX/OPFVF(vext_check_ss) instructions
  * target/riscv: rvv: Apply vext_check_input_eew to vrgather instructions to check mismatched input EEWs encoding constraint
  * target/riscv: rvv: Add CHECK arg to GEN_OPFVF_WIDEN_TRANS
  * target/riscv: rvv: Source vector registers cannot overlap mask register
  * common-user/host/riscv: use tail pseudoinstruction for calling tail
  * target/riscv: fix endless translation loop on big endian systems
  * target/riscv: pmp: move Smepmp operation conversion into a function
  * virtio: Call set_features during reset
  * s390x: Fix leak in machine_set_loadparm
  * 9pfs: fix FD leak and reduce latency of v9fs_reclaim_fd()
  * 9pfs: fix concurrent v9fs_reclaim_fd() calls
  * ...

- all glib2 versions are recent enough to use pcre2:
  * qemu-linux-user: drop pcre (by Andreas Stieger)
- Correct wrong bug mentioned in changelog (bsc#1236329)

- Update to latest stable release (9.2.3)
  Full backport list here:
  https://lore.kernel.org/qemu-devel/44124379-3349-45cf-9238-8a847d8b2770@tls.msk.ru/
  Fixes: bsc#1236329
  Highlights include:
  * hw/intc/aspeed: Fix IRQ handler mask check
  * hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
  * target/riscv: fix handling of nop for vstart >= vl in some vector instruction
  * target/riscv: refactor VSTART_CHECK_EARLY_EXIT() to accept vl as a parameter
  * Makefile: "make dist" generates a .xz, not .bz2
  * target/ppc: Fix e200 duplicate SPRs
  * target/ppc: Fix facility interrupt checks for VSX
  * ppc/spapr: fix default cpu for pre-9.0 machines.
  * host/include/loongarch64: Fix inline assembly compatibility with Clang
  * linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
  * target/riscv: fixes a bug against `ssamoswap` behavior in M-mode
  * target/riscv: fix access permission checks for CSR_SSP
  * docs/about/emulation: Fix broken link
  * vdpa: Allow vDPA to work on big-endian machine
  * vdpa: Fix endian bugs in shadow virtqueue
  * target/loongarch: Fix vldi inst
  * target/arm: Simplify pstate_sm check in sve_access_check
  * target/arm: Make DisasContext.{fp, sve}_access_checked tristate
  * util/cacheflush: Make first DSB unconditional on aarch64
  * docs: Rename default-configs to configs
  * block: Zero block driver state before reopening
  * hw/xen/hvm: Fix Aarch64 typo
  * hw/net/smc91c111: Don't allow data register access to overrun buffer
  * hw/net/smc91c111: Sanitize packet length on tx
  * hw/net/smc91c111: Sanitize packet numbers
  * ppc/pnv/occ: Fix common area sensor offsets
  * xen: No need to flush the mapcache for grants (bsc#1236329)
  * net: move backend cleanup to NIC cleanup
  * net: parameterize the removing client from nc list
  * util/qemu-timer.c: Don't warp timer from timerlist_rearm()
  * target/arm: Correct STRD atomicity
  * target/arm: Correct LDRD atomicity and fault behaviour
  * hw/arm: enable secure EL2 timers for sbsa machine
  * hw/arm: enable secure EL2 timers for virt machine
  * target/arm: Implement SEL2 physical and virtual timers
  * ...
- Fix bsc#1240157:
  * [openSUSE][RPM] spec: Require ipxe and virtio-gpu packages for more arch-es

- Update to latest upstream release, 9.2.2:
  The full list of changes are available at:
  https://lore.kernel.org/qemu-devel/3e847ae0-8dfc-440e-92f7-6eaa89818837@tls.msk.ru/
  Highlights include:
  * net/slirp: libslirp 4.9.0 compatibility
  * target/sparc: Fix gdbstub incorrectly handling registers f32-f62
  * target/sparc: Fix register selection for all F*TOx and FxTO* instructions
  * elfload: Fix alignment when unmapping excess reservation
  * hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
  * make-release: don't rely on $CWD when excluding subproject directories
  * ui/sdl2: reenable the SDL2 Windows keyboard hook procedure
  * vfio/iommufd: Fix SIGSEV in iommufd_cdev_attach()
  * gitlab-ci.d/cirrus: Update the FreeBSD job to v14.2
  * qmp: update vhost-user protocol feature maps
  * linux-user: Do not define struct sched_attr if libc headers do
  * block-backend: Fix argument order when calling 'qapi_event_send_block_io_error()'
  * block: Fix leak in send_qmp_error_event
  * rust: add --rust-target option for bindgen
  * ...
- Fix bsc#1237603:
  * linux-user: Do not define struct sched_attr if libc headers do

- Fix bsc#1228343:
  * tests/acpi: q35: Update host address width in DMAR (bsc#1228343)
  * intel_iommu: Set default aw_bits to 48 starting from QEMU 9.2 (bsc#1228343)
  * tests/acpi: q35: allow DMAR acpi table changes (bsc#1228343)
- Full boot order support (jsc#PED-958):
  * pc-bios: Update the s390 bios images with the recent changes (jsc#PED-958)
  * pc-bios/s390-ccw: Abort IPL on invalid loadparm (jsc#PED-958)
  * pc-bios/s390-ccw/netmain: Fix error messages with regards to the TFTP server (jsc#PED-958)
  * pc-bios/s390-ccw: Fix boot problem with virtio-net devices (jsc#PED-958)
  * pc-bios/s390-ccw/virtio: Add a function to reset a virtio device (jsc#PED-958)
  * hw/s390x: Fix crash that occurs when inspecting older versioned machines types (jsc#PED-958)
- Update to latest upstream release, 9.2.1:
  The full list of changes are available at:
  https://lore.kernel.org/qemu-devel/qemu-stable-9.2.1-20250207102656@cover.tls.msk.ru/
  Highlights include:
  * 9pfs: fix regression regarding CVE-2023-2861
  * tcg: Reset free_temps before tcg_optimize
  * tcg/riscv: Fix StoreStore barrier generation
  * x86/loader: only patch linux kernels
  * roms: re-add edk2-basetools target
  * pc-bios: add missing riscv64 descriptor
  * hw/intc/arm_gicv3_its: Zero initialize local DTEntry etc structs
  * meson.build: Disallow libnfs v6 to fix the broken macOS build
  * target/i386: Reset TSCs of parked vCPUs too on VM reset
  * hw/intc/riscv_aplic: Fix APLIC in_clrip and clripnum write emulation
  * s390x/s390-virtio-ccw: don't crash on weird RAM sizes
  * target/loongarch: Use actual operand size with vbsrl check
  * docs: Correct '-runas' and '-fsdev/-virtfs proxy' indentation
  * docs: Correct release of TCG trace-events removal
  * target/i386/cpu: Fix notes for CPU models
  * migration/multifd: Fix compile error caused by page_size usage
  * migration/multifd: Fix compat with QEMU < 9.0
  * migration: Add more error handling to analyze-migration.py
  * migration: Remove unused argument in vmsd_desc_field_end
  * migration: Fix parsing of s390 stream
  * s390x: Fix CSS migration
  * migration: Rename vmstate_info_nullptr
  * ...

- Fix bsc#1235709:
  * target/s390x: Fix MVC not always invalidating translation blocks

- CPU model for new IBM Z HW (jsc#PED-10266):
  * s390x/cpumodel: gen17 model
  * s390x/cpumodel: Add PLO-extension facility
  * s390x/cpumodel: correct PLO feature wording
  * s390x/cpumodel: Add Sequential-Instruction-Fetching facility
  * s390x/cpumodel: add Ineffective-nonconstrained-transaction facility
  * s390x/cpumodel: add Vector-Packed-Decimal-Enhancement facility 3
  * s390x/cpumodel: add Miscellaneous-Instruction-Extensions Facility 4
  * s390x/cpumodel: add Vector Enhancements facility 3
  * s390x/cpumodel: add Concurrent-functions facility support
  * linux-headers: Update to Linux 6.13-rc1
  * s390x/cpumodel: Add ptff Query Time-Stamp Event (QTSE) support
  * s390x/cpumodel: add msa13 subfunctions
  * s390x/cpumodel: add msa12 changes
  * s390x/cpumodel: add msa11 subfunctions
  * s390x/cpumodel: add msa10 subfunctions

- Build properly with the latest version of Sphinx:
  * [openSUSE][RPM] Fix the build with the latest Sphinx

- Fix bsc#1232712. The problem must be addressed upstream. This is
  only a temporary measure, that should be reverted as soon as
  possible:
  * Revert "ui/curses: Do not use console_select()" (bsc#1232712)
  * Revert "hw/xen: Register framebuffer backend via xen_backend_init()" (bsc#1232712)

- Fix bsc#1233530:
  * docs: use consistent markup for footnotes (bsc#1233530)
  * docs: avoid footnotes consisting of just URLs (bsc#1233530)
  * docs: fix invalid footnote syntax (bsc#1233692)

- Fix bsc#1233530:
  * scsi: megasas: Internal cdbs have 16-byte length (bsc#1233530)

- Build and bug fixes:
  * edk2: update submodule to edk2-stable202408.01
  * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)

- Fix bsc#1228079:
  * target/i386: Expose IBPB-BRTYPE and SBPB CPUID bits to the guest (bsc#1228079)
- Add further CPUID bits fixes:
  * target/i386: Expose new feature bits in CPUID 8000_0021_EAX/EBX
  * target/i386: Expose bits related to SRSO vulnerability
  * target/i386: Add PerfMonV2 feature bit
  * target/i386: Fix minor typo in NO_NESTED_DATA_BP feature bit

- Fix bsc#1232617:
  * qemu-ga: Fix a SIGSEGV in ga_run_command() helper (bsc#1232617)

- Update to version 9.1.1:
  Full changelog here:
  https://lore.kernel.org/qemu-devel/7f0561ec-3564-4860-bacf-a98071a5ce52@tls.msk.ru/
  Some of the most notable features:
  * ui/dbus: fix filtering all update messages
  * ui/win32: fix potential use-after-free with dbus shared memory
  * ui/dbus: fix leak on message filtering
  * hw/audio/hda: fix memory leak on audio setup
  * hw/audio/hda: free timer on exit
  * hw/char/pl011: Use correct masks for IBRD and FBRD
  * hw/intc/arm_gicv3_cpuif: Add cast to match the documentation
  * hw/intc/arm_gicv3: Add cast to match the documentation
  * hw/intc/arm_gicv3: Add cast to match the documentation
  * meson: ensure -mcx16 is passed when detecting ATOMIC128
  * meson: define qemu_isa_flags
  * meson: fix machine option for x86_version
  * target/m68k: Always return a temporary from gen_lea_mode
  * tcg/ppc: Use TCG_REG_TMP2 for scratch index in prepare_host_addr
  * tcg/ppc: Use TCG_REG_TMP2 for scratch tcg_out_qemu_st
  * linux-user: Fix parse_elf_properties GNU0_MAGIC check
  * linux-user/flatload: Take mmap_lock in load_flt_binary()
  * vnc: fix crash when no console attached
  * testing: bump mips64el cross to bookworm and fix package list
  * hw/sd/sdcard: Fix handling of disabled boot partitions
  * target/arm: Avoid target_ulong for physical address lookups
  * block/reqlist: allow adding overlapping requests
  * util/timer: avoid deadlock when shutting down
  * hw/mips/jazz: fix typo in in-built NIC alias
  * tcg: Fix iteration step in 32-bit gvec operation
  * hw/loongarch/virt: Add description for virt machine type
  * migration/multifd: Fix p->iov leak in multifd-uadk.c
  * target/ppc: Fix migration of CPUs with TLB_EMB TLB type
  * target/hppa: Fix random 32-bit linux-user crashes
  * target/arm: Correct ID_AA64ISAR1_EL1 value for neoverse-v1
  * hw/char/stm32l4x5_usart.c: Enable USART ACK bit response
  * migration/multifd: Fix rb->receivedmap cleanup race
  * mac_dbdma: Remove leftover `dma_memory_unmap` calls

- Fix boo#1231166:
  * [openSUSE][RPM] The qemu translation is not being installed (boo#1231166)

- Fix bsc#1243013:
  * [openSUSE] rpm: disable LTO for userspace emulation on 15.6
- Update version to 8.2.10
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/7dd1fbc7-a58f-4b2c-82b9-735840246ab2@tls.msk.ru/
  * Some backports:
    hw/misc/aspeed_hace: Fix buffer overflow in has_padding function
    target/ppc: Fix e200 duplicate SPRs
    linux-user/riscv: Fix handling of cpu mask in riscv_hwprobe syscall
    docs/about/emulation: Fix broken link
    vdpa: Allow vDPA to work on big-endian machine
    vdpa: Fix endian bugs in shadow virtqueue
    target/loongarch: Fix vldi inst
    target/arm: Simplify pstate_sm check in sve_access_check
    target/arm: Make DisasContext.{fp, sve}_access_checked tristate
    util/cacheflush: Make first DSB unconditional on aarch64
    ui/cocoa: Temporarily ignore annoying deprecated declaration warnings
    docs: Rename default-configs to configs
    block: Zero block driver state before reopening
    hw/xen/hvm: Fix Aarch64 typo
    hw/net/smc91c111: Don't allow data register access to overrun buffer
    hw/net/smc91c111: Sanitize packet length on tx
    hw/net/smc91c111: Sanitize packet numbers
    hw/net/smc91c111: Ignore attempt to pop from empty RX fifo
    ppc/pnv/occ: Fix common area sensor offsets
    net: move backend cleanup to NIC cleanup
    net: parameterize the removing client from nc list
    util/qemu-timer.c: Don't warp timer from timerlist_rearm()
    target/arm: Correct STRD atomicity
    target/arm: Correct LDRD atomicity and fault behaviour
    ...

- Fixes for bsc#1237603, bsc#1236709, bsc#1236709:
  * linux-user: Do not define struct sched_attr if libc headers do (bsc#1237603)
  * elfload: Fix alignment when unmapping excess reservation (bsc#1236709)
  * linux-user: Honor elf alignment when placing images (bsc#1236709)

- Fix bsc#1228343:
  * tests/acpi: q35: Update host address width in DMAR (bsc#1228343)
  * intel_iommu: Set default aw_bits to 48 starting from QEMU 9.2 (bsc#1228343)
  * tests/acpi: q35: allow DMAR acpi table changes (bsc#1228343)
- Update version to 8.2.9
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/568115c5-8908-4931-aae0-a57bf542f68a@tls.msk.ru/
  * Some backports:
    gdbstub/user-target: fix gdbserver int format (%d -> %x)
    target/s390x: Fix MVC not always invalidating translation blocks
    physmem: fix qemu_ram_alloc_from_fd size calculation
    hw/usb/canokey: Fix buffer overflow for OUT packet
    target/arm: arm_reset_sve_state() should set FPSR, not FPCR
    hw/cxl: Fix msix_notify: Assertion `vector < dev->msix_entries_nr`
    tests: acpi: update expected blobs
    pci: acpi: Windows 'PCI Label Id' bug workaround
    tests: acpi: whitelist expected blobs
    pci/msix: Fix msix pba read vector poll end calculation
    pci: ensure valid link status bits for downstream ports
    hw/usb/hcd-xhci-pci: Use modulo to select MSI vector as per spec
    backends/cryptodev-vhost-user: Fix local_error leaks
    tests/qtest/boot-serial-test: Correct HPPA machine name
    target/i386/cpu: Fix notes for CPU models
    docs: Correct release of TCG trace-events removal
    target/loongarch: Use actual operand size with vbsrl check
    s390x/s390-virtio-ccw: don't crash on weird RAM sizes
    vhost-user: fix shared object return values
    meson.build: Disallow libnfs v6 to fix the broken macOS build
    hw/intc/arm_gicv3_its: Zero initialize local DTEntry etc structs
    roms: re-add edk2-basetools target
    edk2: commit version info
    edk2: get version + date from git submodule
    x86/loader: only patch linux kernels
    ...

- Update to latest upstream release, 9.2.0:
  The full list of changes are available at:
  https://wiki.qemu.org/ChangeLog/9.2
  Highlights include:
  * virtio-gpu: support for 3D acceleration of Vulkan applications via
    Venus Vulkan driver in the guest and virglrenderer host library
  * crypto: GLib crypto backend now supports SHA-384 hashes
  * migration: QATzip-accelerated compression support while using multiple
    migration streams
  * Rust: experimental support for device models written in Rust (for
    development use only)
  * ARM: emulation support for FEAT_EBF16, FEAT_CMOW architecture features
  * ARM: support for two-stage SMMU translation for sbsa-ref and virt boards
  * ARM: support for CPU Security Extensions for xilinx-zynq-a9 board
  * ARM: 64GB+ memory support when using HVF acceleration on newer Macs
  * HPPA: SeaBIOS-hppa v17 firmware with various fixes and enhancements
  * RISC-V: IOMMU support for virt machine
  * RISC-V: support for control flow integrity and Svvptc extensions, and
    support for Bit-Manipulation extension on OpenTitan boards
  * RISC-V: improved performance for vector unit-stride/whole register
    ld/st instructions
  * s390x: support for booting from other devices if the previous ones fail
  * x86: support for new nitro-enclave machine type that can emulate
  * AWS Nitro Enclave and can boot from Enclave Image Format files.
  * x86: KVM support for enabling AVX10, as well as enabling specific
    AVX10 versions via command-line
  * and lots more...
- Other changes:
  * Removed deprecated 'cris' support
  * Removed deprecated virtfs-proxy-helper
  * (`--enable-rust` not addressed yet)

- Fix bsc#1221812, bsc#1232283, bsc#1230978:
  * [openSUSE] block: Move qcow2 invalidation query-block op_blocker

- Update to version 9.1.2:
  Full changelog here:
  https://lore.kernel.org/qemu-devel/21ba2773-11a6-45ad-bf98-9b5c2cdccb9b@tls.msk.ru/
  Some of the most notable features:
  * usb-hub: Fix handling port power control messages
  * hw/audio/hda: fix memory leak on audio setup
  * Revert "hw/audio/hda: fix memory leak on audio setup" (bsc#1232728)
  * hw/misc/mos6522: Fix bad class definition of the MOS6522 device
  * vfio/container: Fix container object destruction
  * target/i386: fix hang when using slow path for ptw_setl
  * tcg: Allow top bit of SIMD_DATA_BITS to be set in simd_desc()
  * linux-user/arm: Select vdso for be8 and be32 modes
  * linux-user/arm: Reduce vdso alignment to 4k
  * linux-user: Tolerate CONFIG_LSM_MMAP_MIN_ADDR
  * accel/tcg: Fix user-only probe_access_internal plugin check
  * target/arm: Drop user-only special case in sve_stN_r
  * linux-user: Fix setreuid and setregid to use direct syscalls
  * hw/i386/pc: Don't try to init PCI NICs if there is no PCI bus
  * target/i386: Fix legacy page table walk
  * 9pfs: fix crash on 'Treaddir' request
  * hw/nvme: fix handling of over-committed queues
  * migration: Ensure vmstate_save() sets errp
  * target/arm: Fix SVE SDOT/UDOT/USDOT (4-way, indexed)
  * target/arm: Add new MMU indexes for AArch32 Secure PL1&0
  * Revert "target/arm: Fix usage of MMU indexes when EL3 is AArch32"
  * acpi/disassemle-aml.sh: fix up after dir reorg
  * hw/acpi: Fix ordering of BDF in Generic Initiator PCI Device Handle.
  * qemu-ga: Fix a SIGSEGV in ga_run_command() helper
  * hw/sd/sdcard: Fix calculation of size when using eMMC boot partitions
  * tests/tcg: Replace -mpower8-vector with -mcpu=power8
  * hw/ssi/pnv_spi: Fixes Coverity CID 1558831
  * hw/ssi/pnv_spi: Return early in transfer()

- Bugfixes and CVEs:
  * hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT (bsc#1230834, CVE-2024-8354)
  * softmmu: Support concurrent bounce buffers (bsc#1230915, CVE-2024-8612)
  * system/physmem: Per-AddressSpace bounce buffering (bsc#1230915, CVE-2024-8612)
  * system/physmem: Propagate AddressSpace to MapClient helpers (bsc#1230915, CVE-2024-8612)
  * system/physmem: Replace qemu_mutex_lock() calls with QEMU_LOCK_GUARD (bsc#1230915, CVE-2024-8612)

- Update version to 8.2.7
  * Full changelog here:
    https://lore.kernel.org/qemu-devel/d9ff276f-f1ba-4e90-8343-a7a0dc2bf305@tls.msk.ru/
  * Fixes:
    bsc#1229007, CVE-2024-7409
    bsc#1224132, CVE-2024-4693
  * Some backports:
    gitlab: fix logic for changing docker tag on stable branches
    ui/sdl2: set swap interval explicitly when OpenGL is enabled
    hw/intc/arm_gic: fix spurious level triggered interrupts
    hw/audio/virtio-sound: fix heap buffer overflow
    tests/docker: update debian i686 and mipsel images to bookworm
    tests/docker: remove debian-armel-cross
    hw/display/vhost-user-gpu.c: fix vhost_user_gpu_chr_read()
    crypto: check gnutls & gcrypt support the requested pbkdf hash
    crypto: run qcrypto_pbkdf2_count_iters in a new thread
    softmmu/physmem: fix memory leak in dirty_memory_extend()
    target/ppc: Fix migration of CPUs with TLB_EMB TLB type
    gitlab: migrate the s390x custom machine to 22.04
    target/hppa: Fix PSW V-bit packaging in cpu_hppa_get for hppa64
    hw/audio/virtio-snd: fix invalid param check
    virtio-pci: Fix the use of an uninitialized irqfd

- Fix bsc#1229929, bsc#1230140 (patch already submitted upstream):
  * [openSUSE] target/ppc: Fix lxvx/stxvx facility check (bsc#1229929)

- Fix bsc#1221812:
  * [openSUSE] block: Reschedule query-block during qcow2 invalidation (bsc#1221812)
- Fixup old patches and infra issues:
  * [openSUSE] fixup patch "pc: q35: Allow 1024 cpus for old machine types"
  * [openSUSE] Point submodule branches to gitlab

- Fix bsc#1229007, CVE-2024-7409:
  * nbd/server: CVE-2024-7409: Close stray clients at server-stop (bsc#1229007)
  * nbd/server: CVE-2024-7409: Drop non-negotiating clients (bsc#1229007)
  * nbd/server: CVE-2024-7409: Cap default max-connections to 100 (bsc#1229007)
  * nbd/server: Plumb in new args to nbd_client_add() (bsc#1229007, CVE-2024-7409)
  * nbd: Minor style and typo fixes (bsc#1229007, CVE-2024-7409)

- Update to version 8.2.6:
  Full backport lists (from the various releases) here:
  https://lore.kernel.org/qemu-devel/1721203806.547734.831464.nullmailer@tls.msk.ru/
  Some of the upstream backports are:
  hw/nvme: fix number of PIDs for FDP RUH update
  sphinx/qapidoc: Fix to generate doc for explicit, unboxed arguments
  char-stdio: Restore blocking mode of stdout on exit
  virtio: remove virtio_tswap16s() call in vring_packed_event_read()
  virtio-pci: Fix the failure process in kvm_virtio_pci_vector_use_one()
  block: Parse filenames only when explicitly requested
  iotests/270: Don't store data-file with json: prefix in image
  iotests/244: Don't store data-file with protocol in image
  qcow2: Don't open data_file with BDRV_O_NO_IO (bsc#1227322, CVE-2024-4467)
  target/arm: Fix FJCVTZS vs flush-to-zero
  target/arm: Fix VCMLA Dd, Dn, Dm[idx]
  i386/cpu: fixup number of addressable IDs for processor cores in the physical package
  tests: Update our CI to use CentOS Stream 9 instead of 8
  migration: Fix file migration with fdset
  tcg/loongarch64: Fix tcg_out_movi vs some pcrel pointers
  target/sparc: use signed denominator in sdiv helper
  linux-user: Make TARGET_NR_setgroups affect only the current thread
  accel/tcg: Fix typo causing tb->page_addr[1] to not be recorded
  stdvga: fix screen blanking
  hw/audio/virtio-snd: Always use little endian audio format
  ui/gtk: Draw guest frame at refresh cycle
  virtio-net: drop too short packets early
  target/i386: fix size of EBP writeback in gen_enter()

- Update to version 8.2.5:
  Full backport lists (from the various releases) here:
  https://lore.kernel.org/qemu-devel/1718081047.648425.1238605.nullmailer@tls.msk.ru/
  Some of the upstream backports are:
  target/loongarch: fix a wrong print in cpu dump
  ui/sdl2: Allow host to power down screen
  target/i386: fix SSE and SSE2 feature check
  target/i386: fix xsave.flat from kvm-unit-tests
  disas/riscv: Decode all of the pmpcfg and pmpaddr CSRs
  target/riscv/kvm.c: Fix the hart bit setting of AIA
  target/riscv: rvzicbo: Fixup CBO extension register calculation
  target/riscv: do not set mtval2 for non guest-page faults
  target/riscv: prioritize pmp errors in raise_mmu_exception()
  target/riscv: rvv: Remove redudant SEW checking for vector fp narrow/widen instructions
  target/riscv: rvv: Check single width operator for vfncvt.rod.f.f.w
  target/riscv: rvv: Check single width operator for vector fp widen instructions
  target/riscv: rvv: Fix Zvfhmin checking for vfwcvt.f.f.v and vfncvt.f.f.w instructions
  target/riscv/cpu.c: fix Zvkb extension config
  target/riscv: Fix the element agnostic function problem
  target/riscv/kvm: tolerate KVM disable ext errors
  hw/intc/riscv_aplic: APLICs should add child earlier than realize
  iotests: test NBD+TLS+iothread
  qio: Inherit follow_coroutine_ctx across TLS
  target/arm: Disable SVE extensions when SVE is disabled
  hw/intc/arm_gic: Fix handling of NS view of GICC_APR<n>
  hvf: arm: Fix encodings for ID_AA64PFR1_EL1 and debug System registers
  gitlab: use 'setarch -R' to workaround tsan bug
  gitlab: use $MAKE instead of 'make'
  dockerfiles: add 'MAKE' env variable to remaining containers
  gitlab: Update msys2-64bit runner tags
  target/i386: no single-step exception after MOV or POP SS
  ...

- Update to version 8.2.4. Full changelog/backports here:
  https://lore.kernel.org/qemu-devel/1715632914.382233.1013785.nullmailer@tls.msk.ru/
  Some of the upstream backports are:
  target/sh4: Fix SUBV opcode
  target/sh4: Fix ADDV opcode
  hw/arm/npcm7xx: Store derivative OTP fuse key in little endian
  hw/dmax/xlnx_dpdma: fix handling of address_extension descriptor fields
  hw/ufs: Fix buffer overflow bug
  tests/avocado: update sunxi kernel from armbian to 6.6.16
  target/loongarch/cpu.c: typo fix: expection
  backends/cryptodev-builtin: Fix local_error leaks
  nbd/server: Mark negotiation functions as coroutine_fn
  nbd/server: do not poll within a coroutine context
  linux-user: do_setsockopt: fix SOL_ALG.ALG_SET_KEY
  target/riscv/kvm: change timer regs size to u64
  target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64
  target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32
  ...

- Fixes:
  * [openSUSE][RPM] Prioritize PA over PipeWire in SLE (bsc#1222218)
  * [openSUSE][RPM] Hostname normalization (for repr. build ) done properly (boo#1084909)

- Fix a build issue on riscv:
  * target/riscv/kvm: rename riscv_reg_id() to riscv_reg_id_ulong()
  * target/riscv/kvm: add RISCV_CONFIG_REG()
  * target/riscv/kvm: change timer regs size to u64
  * target/riscv/kvm: change KVM_REG_RISCV_FP_D to u64
  * target/riscv/kvm: change KVM_REG_RISCV_FP_F to u32
- Update to version 8.2.3. Full changelog/backports here:
  https://lore.kernel.org/qemu-devel/1713980341.971368.1218343.nullmailer@tls.msk.ru/
  Some of the upstream backports are:
  * Update version for 8.2.3 release
  * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS.
  * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs.
  * hw/pci-host/ppc440_pcix: Do not expose a bridge device on PCI bus
  * hw/isa/vt82c686: Keep track of PIRQ/PINT pins separately
  * virtio-pci: fix use of a released vector
  * linux-user/x86_64: Handle the vsyscall page in open_self_maps_{2,4}
  * hw/audio/virtio-snd: Remove unused assignment
  * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum()
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set
  * hw/net/lan9118: Fix overflow in MIL TX FIFO
  * hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE definition
  * backends/cryptodev: Do not abort for invalid session ID
  * hw/misc/applesmc: Fix memory leak in reset() handler
  * hw/block/nand: Fix out-of-bound access in NAND block buffer
  * hw/block/nand: Have blk_load() take unsigned offset and return boolean
  * hw/block/nand: Factor nand_load_iolen() method out
  * qemu-options: Fix CXL Fixed Memory Window interleave-granularity typo
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs
  * mirror: Don't call job_pause_point() under graph lock (bsc#1224179)
  * ...and many more...

- Backports and bugfixes:
  * hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() (bsc#1222841, CVE-2024-3567)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * hw/nvme: Use pcie_sriov_num_vfs() (bsc#1220065, CVE-2024-26328)

- Update to version 8.2.2. Full changelog here:
  https://lore.kernel.org/qemu-devel/1709577077.783602.1474596.nullmailer@tls.msk.ru/
  Some upstream backports:
  * chardev/char-socket: Fix TLS io channels sending too much data to the backend
  * tests/unit/test-util-sockets: Remove temporary file after test
  * hw/usb/bus.c: PCAP adding 0xA in Windows version
  * hw/intc/Kconfig: Fix GIC settings when using "--without-default-devices"
  * gitlab: force allow use of pip in Cirrus jobs
  * tests/vm: avoid re-building the VM images all the time
  * tests/vm: update openbsd image to 7.4
  * target/i386: leave the A20 bit set in the final NPT walk
  * target/i386: remove unnecessary/wrong application of the A20 mask
  * target/i386: Fix physical address truncation
  * target/i386: check validity of VMCB addresses
  * target/i386: mask high bits of CR3 in 32-bit mode
  * pl031: Update last RTCLR value on write in case it's read back
  * hw/nvme: fix invalid endian conversion
  * update edk2 binaries to edk2-stable202402
  * update edk2 submodule to edk2-stable202402
  * target/ppc: Fix crash on machine check caused by ifetch
  * target/ppc: Fix lxv/stxv MSR facility check
  * .gitlab-ci.d/windows.yml: Drop msys2-32bit job
  * system/vl: Update description for input grab key
  * docs/system: Update description for input grab key
  * hw/hppa/Kconfig: Fix building with "configure --without-default-devices"
  * tests/qtest: Depend on dbus_display1_dep
  * meson: Explicitly specify dbus-display1.h dependency
  * audio: Depend on dbus_display1_dep
  * ui/console: Fix console resize with placeholder surface
  * ui/clipboard: add asserts for update and request
  * ui/clipboard: mark type as not available when there is no data
  * ui: reject extended clipboard message if not activated
  * target/i386: Generate an illegal opcode exception on cmp instructions with lock prefix
  * i386/cpuid: Move leaf 7 to correct group
  * i386/cpuid: Decrease cpuid_i when skipping CPUID leaf 1F
  * i386/cpu: Mask with XCR0/XSS mask for FEAT_XSAVE_XCR0_HI and FEAT_XSAVE_XSS_HI leafs
  * i386/cpu: Clear FEAT_XSAVE_XSS_LO/HI leafs when CPUID_EXT_XSAVE is not available
  * .gitlab-ci/windows.yml: Don't install libusb or spice packages on 32-bit
  * iotests: Make 144 deterministic again
  * target/arm: Don't get MDCR_EL2 in pmu_counter_enabled() before checking ARM_FEATURE_PMU
  * target/arm: Fix SVE/SME gross MTE suppression checks
  * target/arm: Handle mte in do_ldrq, do_ldro
- Address bsc#1220310. Backported upstream commits:
  * ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS
  * ppc/spapr: Introduce SPAPR_IRQ_NR_IPIS to refer IRQ range for CPU IPIs.

- Fix bsc#1220799. Amended commit:
  * [openSUSE]: Increase default phys bits to 42, if host supports that
    (bsc#1205978, bsc#1219977, bsc#1220799)

- Backports and bugfixes:
  * [openSUSE]: Increase default phys bits to 42, if host supports that
    (bsc#1205978, bsc#1219977)
  * vfio/pci: Clear MSI-X IRQ index always (bsc#1220275)

- Just "prettify" the spec files a little:
  * [openSUSE][RPM] Cosmetic fixes to spec files (copyright, sorting, etc)

- Just "prettify" the spec files a little:
  * [openSUSE][RPM] Cosmetic fixes to spec files (copyright, sorting, etc)

Update to latest stable version (8.2.1)
- Downstream changes:
  * [openSUSE][RPM]: Install the VGA module "more often" (bsc#1219164)
  * [openSUSE][RPM] Fix handling of qemu-kvm legacy package for RISCV
  * [openSUSE][RPM] factor common definitions between qemu and qemu-linux-user spec files
- Upstream backports:
  * target/arm: Fix incorrect aa64_tidcp1 feature check
  * target/arm: Fix A64 scalar SQSHRN and SQRSHRN
  * target/xtensa: fix OOB TLB entry access
  * qtest: bump aspeed_smc-test timeout to 6 minutes
  * monitor: only run coroutine commands in qemu_aio_context
  * iotests: port 141 to Python for reliable QMP testing
  * iotests: add filter_qmp_generated_node_ids()
  * block/blklogwrites: Fix a bug when logging "write zeroes" operations.
  * virtio-net: correctly copy vnet header when flushing TX (bsc#1218484, CVE-2023-6693)
  * tcg/arm: Fix SIGILL in tcg_out_qemu_st_direct
  * linux-user/riscv: Adjust vdso signal frame cfa offsets
  * linux-user: Fixed cpu restore with pc 0 on SIGBUS
  * block/io: clear BDRV_BLOCK_RECURSE flag after recursing in bdrv_co_block_status
  * coroutine-ucontext: Save fake stack for pooled coroutine
  * tcg/s390x: Fix encoding of VRIc, VRSa, VRSc insns
  * accel/tcg: Revert mapping of PCREL translation block to multiple virtual addresses
  * acpi/tests/avocado/bits: wait for 200 seconds for SHUTDOWN event from bits VM
  * s390x/pci: drive ISM reset from subsystem reset
  * s390x/pci: refresh fh before disabling aif
  * s390x/pci: avoid double enable/disable of aif
  * hw/scsi/esp-pci: set DMA_STAT_BCMBLT when BLAST command issued
  * hw/scsi/esp-pci: synchronise setting of DMA_STAT_DONE with ESP completion interrupt
  * hw/scsi/esp-pci: generate PCI interrupt from separate ESP and PCI sources
  * hw/scsi/esp-pci: use correct address register for PCI DMA transfers
  * migration/rdma: define htonll/ntohll only if not predefined
  * hw/pflash: implement update buffer for block writes
  * hw/pflash: use ldn_{be,le}_p and stn_{be,le}_p
  * hw/pflash: refactor pflash_data_write()
  * backends/cryptodev: Do not ignore throttle/backends Errors
  * target/i386: pcrel: store low bits of physical address in data[0]
  * target/i386: fix incorrect EIP in PC-relative translation blocks
  * target/i386: Do not re-compute new pc with CF_PCREL
  * load_elf: fix iterator's type for elf file processing
  * target/hppa: Update SeaBIOS-hppa to version 15
  * target/hppa: Fix IOR and ISR on error in probe
  * target/hppa: Fix IOR and ISR on unaligned access trap
  * target/hppa: Export function hppa_set_ior_and_isr()
  * target/hppa: Avoid accessing %gr0 when raising exception
  * hw/hppa: Move software power button address back into PDC
  * target/hppa: Fix PDC address translation on PA2.0 with PSW.W=0
  * hw/pci-host/astro: Add missing astro & elroy registers for NetBSD
  * hw/hppa/machine: Disable default devices with --nodefaults option
  * hw/hppa/machine: Allow up to 3840 MB total memory
  * readthodocs: fully specify a build environment
  * .gitlab-ci.d/buildtest.yml: Work around htags bug when environment is large
  * target/s390x: Fix LAE setting a wrong access register
  * tests/qtest/virtio-ccw: Fix device presence checking
  * tests/acpi: disallow tests/data/acpi/virt/SSDT.memhp changes
  * tests/acpi: update expected data files
  * edk2: update binaries to git snapshot
  * edk2: update build config, set PcdUninstallMemAttrProtocol = TRUE.
  * edk2: update to git snapshot
  * tests/acpi: allow tests/data/acpi/virt/SSDT.memhp changes
  * util: fix build with musl libc on ppc64le
  * tcg/ppc: Use new registers for LQ destination
  * hw/intc/arm_gicv3_cpuif: handle LPIs in in the list registers
  * hw/vfio: fix iteration over global VFIODevice list
  * vfio/container: Replace basename with g_path_get_basename
  * edu: fix DMA range upper bound check
  * hw/net: cadence_gem: Fix MDIO_OP_xxx values
  * audio/audio.c: remove trailing newline in error_setg
  * chardev/char.c: fix "abstract device type" error message
  * target/riscv: Fix mcycle/minstret increment behavior
  * hw/net/can/sja1000: fix bug for single acceptance filter and standard frame
  * target/i386: the sgx_epc_get_section stub is reachable
  * configure: use a native non-cross compiler for linux-user
  * include/ui/rect.h: fix qemu_rect_init() mis-assignment
  * target/riscv/kvm: do not use non-portable strerrorname_np()
  * iotests: Basic tests for internal snapshots
  * vl: Improve error message for conflicting -incoming and -loadvm
  * block: Fix crash when loading snapshot on inactive node
- Fixes:
  * bsc#1218484 (CVE-2023-6693)

- Try to solve the qemu-kvm dependency issues on all arches
  (see, e.g., bsc#1218684)
  * [openSUSE][RPM] Create the legacy qemu-kvm symlink for all arches

- Update the service file to use OBS-scm (by fvogt)
- Various fixes:
  * [openSUSE][RPM] Fix enabling features on non-x86_64 (bsc#1220011, bsc#1219818)
  * [openSUSE][RPM] Disable test-crypto-secret in linux-user build
  * [openSUSE] Update ipxe submodule reference (bsc#1219733, bsc#1219722)
  * [openSUSE][RPM] spec: allow building without spice

- Fix a build issue of OVMF caused by
  https://gitlab.com/qemu-project/qemu/-/issues/2064:
  * target/i386: fix incorrect EIP in PC-relative translation blocks
  * target/i386: Do not re-compute new pc with CF_PCREL

- Update to latest upstream release, 8.2.0:
  The full list of changes are available at: https://wiki.qemu.org/ChangeLog/8.2
  Highlights include:
  * New virtio-sound device emulation
  * New virtio-gpu rutabaga device emulation used by Android emulator
  * New hv-balloon for dynamic memory protocol device for Hyper-V guests
  * New Universal Flash Storage device emulation
  * Network Block Device (NBD) 64-bit offsets for improved performance
  * dump-guest-memory now supports the standard kdump format
  * ARM: Xilinx Versal board now models the CFU/CFI, and the TRNG device
  * ARM: CPU emulation support for cortex-a710 and neoverse-n2
  * ARM: architectural feature support for PACQARMA3, EPAC, Pauth2, FPAC,
    FPACCOMBINE, TIDCP1, MOPS, HBC, and HPMN0
  * HPPA: CPU emulation support for 64-bit PA-RISC 2.0
  * HPPA: machine emulation support for C3700, including Astro memory
    controller and four Elroy PCI bridges
  * LoongArch: ISA support for LASX extension and PRELDX instruction
  * LoongArch: CPU emulation support for la132
  * RISC-V: ISA/extension support for AIA virtualization support via KVM,
    and vector cryptographic instructions
  * RISC-V: Numerous extension/instruction cleanups, fixes, and reworks
  * s390x: support for vfio-ap passthrough of crypto adapter for
    protected
    virtualization guests
  * Tricore: support for TC37x CPU which implements ISA v1.6.2
  * Tricore: support for CRCN, FTOU, FTOHP, and HPTOF instructions
  * x86: Zen support for PV console and network devices
- Patch added (from upstream stable tree):
  * include/ui/rect.h: fix qemu_rect_init() mis-assignment

- Some packaging and dependencies fixes:
  * [openSUSE] rpm: restrict canokey to openSUSE only
  * [openSUSE] rpm: fix virtiofsd dependency on 32 bit systems
  * [openSUSE] rpm: add support for canokeys (boo#1217520)

- Rearrange dependencies and subpackages and filter features for ALP
  * [openSUSE] rpm: disable Xen support in ALP-based distros
  * [openSUSE] rpm: some more refinements of inter-subpackage dependencies

- Fix boo#1084909 and create a new qemu-spice metapackage:
  * [openSUSE] rpm: normalize hostname, for reproducible builds (#44)
  * [openSUSE] rpm: new subpackage, for SPICE

- Align to upstream stable release. It includes many of the patches we had
  backported ourself, to fix bugs and issues, plus more. See here for details:
  * https://lore.kernel.org/qemu-devel/1700589639.257680.3420728.nullmailer@tls.msk.ru/
  * https://gitlab.com/qemu-project/qemu/-/commits/stable-8.1?ref_type=heads
  An (incomplete!) list of such backports is:
  * Update version for 8.1.3 release
  * hw/mips: LOONGSON3V depends on UNIMP device
  * target/arm: HVC at EL3 should go to EL3, not EL2
  * s390x/pci: only limit DMA aperture if vfio DMA limit reported
  * target/riscv/kvm: support KVM_GET_REG_LIST
  * target/riscv/kvm: improve 'init_multiext_cfg' error msg
  * tracetool: avoid invalid escape in Python string
  * tests/tcg/s390x: Test LAALG with negative cc_src
  * target/s390x: Fix LAALG not updating cc_src
  * tests/tcg/s390x: Test CLC with inaccessible second operand
  * target/s390x: Fix CLC corrupting cc_src
  * tests/qtest: ahci-test: add test exposing reset issue with pending callback
  * hw/ide: reset: cancel async DMA operation before resetting state
  * target/mips: Fix TX79 LQ/SQ opcodes
  * target/mips: Fix MSA BZ/BNZ opcodes displacement
  * ui/gtk-egl: apply scale factor when calculating window's dimension
  * ui/gtk: force realization of drawing area
  * ati-vga: Implement fallback for pixman routines
  * ...

- Backports and bugfixes:
  * [openSUSE] Make Sphinx build reproducible (boo#1102408)
  * target/s390x/arch_dump: Add arch cleanup function for PV dumps (bsc#1217227)
  * dump: Add arch cleanup function (bsc#1217227)
  * target/s390x/dump: Remove unneeded dump info function pointer init (bsc#1217227)

- Fix bsc#1216638:
  * target/s390x: Fix LAALG not updating cc_src
  * target/s390x: Fix CLC corrupting cc_src