Re: [OE-core][PATCH] qemu: upgrade 10.0.2 -> 10.0.5

[Richard Purdie <richard.purdie@linuxfoundation.org>]

On Tue, 2025-10-14 at 21:12 +0200, Peter Marko via lists.openembedded.org wrote:
> From: Peter Marko <peter.marko@siemens.com>
> 
> Handles CVE-2024-8354.
> Drop patch included in (backported to) this release.
> 
> Reference:
> * https://security-tracker.debian.org/tracker/CVE-2024-8354
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---
>  ...native_10.0.2.bb => qemu-native_10.0.5.bb} |  0
>  ...10.0.2.bb => qemu-system-native_10.0.5.bb} |  0
>  meta/recipes-devtools/qemu/qemu.inc           |  3 +-
>  ...move-deprecated-get_event_loop-calls.patch | 85 -------------------
>  .../qemu/{qemu_10.0.2.bb => qemu_10.0.5.bb}   |  0
>  5 files changed, 1 insertion(+), 87 deletions(-)
>  rename meta/recipes-devtools/qemu/{qemu-native_10.0.2.bb => qemu-native_10.0.5.bb} (100%)
>  rename meta/recipes-devtools/qemu/{qemu-system-native_10.0.2.bb => qemu-system-native_10.0.5.bb} (100%)
>  delete mode 100644 meta/recipes-devtools/qemu/qemu/0012-Remove-deprecated-get_event_loop-calls.patch
>  rename meta/recipes-devtools/qemu/{qemu_10.0.2.bb => qemu_10.0.5.bb} (100%)

I did put this in for testing but we saw a lot of weird failures,
particularly on arm and riscv targets in runtime testing. Whilst I'm
not 100% sure it was this, we noticed a few arm/riscv changes upstream
on this branch after the 10.0.5 release.

Since we're trying to get M3 built and stable, I'm holding off this
until we can work out what is going on, CVE or not.

Cheers,

Richard