SUSE-IU-2026:6445-1: Recommended update of suse/sl-micro/6.2/kvm-os-container

[sle-container-updates at lists.suse.com]

SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container
-----------------------------------------------------------------
Image Advisory ID : SUSE-IU-2026:6445-1
Image Tags        : suse/sl-micro/6.2/kvm-os-container:2.3.1 , suse/sl-micro/6.2/kvm-os-container:2.3.1-8.87 , suse/sl-micro/6.2/kvm-os-container:latest
Image Release     : 8.87
Severity          : important
Type              : recommended
References        : 1262577 1271635 
-----------------------------------------------------------------

The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: 1468
Released:    Mon Aug 24 11:44:33 2026
Summary:     Recommended update for qemu
Type:        recommended
Severity:    important
References:  1262577,1271635
This update for qemu fixes the following issues:

- Update to version 10.0.12:
    * hw/audio/intel-hda: Restrict all DMA engine paths to memories
    * hw/net/cadence: Return current Cadence GEM queue pointers
    * hw/misc/applesmc: Fix a typo setting MSSD key
      replay: Fix use of uninitialized pointer on error
    * hw/display/qxl:
        + Validate monitors_config heads[] in phys2virt
        + Fix TOCTOU in cursor chunk data_size handling
    * net: Correct padding check in qemu_receive_packet()
    * hw/net/xilinx_axienet: Fix PHY register 17 link status reporting
    * hw/usb/hcd-xhci-sysbus: Fix OOB heap access in xhci_sysbus_intr_raise()
    * hw/usb/hcd-xhci:
        + Fix guest-triggerable assert() in xhci_find_stream()
        + Turn guest-triggerable abort() into qemu_log_mask()
    * usbredir:
        + Fix infinite loop and SIGFPE with zero max_packet_size
        + Fix use-after-free on buffered bulk packet overflow
    * tests/qtest: Add xhci-pci unplug finalize regression test
    * hw/usb/hcd-xhci-pci: Break host link cycle so device_finalize() runs on unplug
    * hw/usb/xhci: Clamp interval exponent to avoid UB shift in xhci_init_epctx()
    * accel/tcg: Move jit thread manipulation into do_tb_phys_invalidate
    * hw/display/virtio-gpu:
        + Check pixman_image_create_bits() results
        + Handle migration iov allocation failure
        + Cap submit_3d command buffer allocation
        + Fix dmabuf_fd leak on remap failure
    * ui/vnc:
        + Validate SetPixelFormat field ranges
        + Fix out-of-bounds write in lossy refresh dirty marking
        + Validate color shifts in SetPixelFormat
        + Fix OOB write in vnc_refresh_lossy_rect
    * ui/gtk: Narrow DMA-BUF critical section
    * ui/input-barrier: Fix off-by-one in keycode bounds check
    * hw/usb/hcd-ohci: Make sure that ohci_service_ed_list() cannot loop forever
    * hw/scsi/vmw_pvscsi:
        + Add a comment to explain the endianness
        + Translate data endianness
    * hw/sparc64/niagara: Use int64_t for vdisk size to avoid truncation
    * hw/misc/ivshmem: Clear chardev handlers before freeing peers
    * linux-user/alpha:
        + Populate AT_HWCAP from env to amask
        + Add coredump support
    * s390x/css: Firm up handling of chained TIC CCWs
    * s390x/sclp: Prevent re-reading the sclp header
    * hw/s390x/sclp:
        + Do not ignore address_space_read/write() errors
        + Replace [cpu_physical_memory to address_space]_r/w()
    * hw/misc/stm32_rcc: Correct offset-to-irq calculation
    * hw/display/sm501:
        + Don't allow guest to set ram size larger than it is
        + Avoid overflow problems in bounds check calculations
        + Catch bad coordinates for RTL operations
    * hw/usb/dev-wacom: Don't write off end of buffer
    * hw/net/vmxnet3: Correct bounds check on tx queue index
    * target/arm: Be more defensive for invalid tlbi_aa64_get_range
    * linux-user: Validate guest-passed dm_ioctl data_size
    * tests:
        + Update SPCR loongarch64 and riscv64 test data
        + Allow differences in SPCR
    * hw/acpi: Correct field sequence in SPCR table
    * hw/pci/pcie_doe: Check mailbox length for overflows
- Fix: KVM migration - rapidly increasing Iteration counter on a 4 TiB memory VM (bsc#1262577):
    * tests/qtest/migration: Fix auto-converge test
    * migration: Move iteration counter out of RAM
- Fix: Redefined virtual machine fails to start due to missing features: pdc (bsc#1271635):
    * Revert 'i386/cpu: Warn about why CPUID_EXT_PDCM is not available'


The following package changes have been done:

- qemu-guest-agent-10.0.12-160000.1.1 updated