[ANNOUNCE] QEMU 9.0.0-rc3 is now available

[Michael Roth]

Hello,

On behalf of the QEMU Team, I'd like to announce the availability of the
fourth release candidate for the QEMU 9.0 release. This release is meant
for testing purposes and should not be used in a production environment.

  http://download.qemu.org/qemu-9.0.0-rc3.tar.xz
  http://download.qemu.org/qemu-9.0.0-rc3.tar.xz.sig

  http://download.qemu.org/qemu-9.0.0-rc3.tar.bz2
  http://download.qemu.org/qemu-9.0.0-rc3.tar.bz2.sig

A note from the maintainer:

  With luck this will be our last rc, and we'll be able to make the
  final 9.0 release on April 16th. However there were quite a lot
  of late-arriving changes in this rc cycle, so it's possible we might
  need to make a few further fixes that need us to make an rc4. In
  that case we'll release the rc4 on the 16th, and the final release
  on the 23rd.

You can help improve the quality of the QEMU 9.0 release by testing this
release and reporting bugs using our GitLab issue tracker:

  https://gitlab.com/qemu-project/qemu/-/milestones/11

The release plan, as well a documented known issues for release
candidates, are available at:

  http://wiki.qemu.org/Planning/9.0

Please add entries to the ChangeLog for the 9.0 release below:

  http://wiki.qemu.org/ChangeLog/9.0

Thank you to everyone involved!

Changes since rc2:

02e16ab9f4: Update version for v9.0.0-rc3 release (Peter Maydell)
dcb0a1ac03: hw/audio/virtio-snd: Remove unused assignment (Philippe 
Mathieu-Daudé)
83ddb3dbba: hw/net/net_tx_pkt: Fix overrun in update_sctp_checksum() (Philippe 
Mathieu-Daudé)
9e4b27ca6b: hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set 
(Philippe Mathieu-Daudé)
ad766d603f: hw/net/lan9118: Fix overflow in MIL TX FIFO (Philippe Mathieu-Daudé)
a45223467e: hw/net/lan9118: Replace magic '2048' value by MIL_TXFIFO_SIZE 
definition (Philippe Mathieu-Daudé)
eaf2bd2953: backends/cryptodev: Do not abort for invalid session ID (Philippe 
Mathieu-Daudé)
fc09ff2979: hw/misc/applesmc: Fix memory leak in reset() handler (Philippe 
Mathieu-Daudé)
5c338216f5: hw/misc/applesmc: Do not call DeviceReset from DeviceRealize 
(Philippe Mathieu-Daudé)
d39fdfff34: hw/block/nand: Fix out-of-bound access in NAND block buffer 
(Philippe Mathieu-Daudé)
2e3e09b368: hw/block/nand: Have blk_load() take unsigned offset and return 
boolean (Philippe Mathieu-Daudé)
7a86544f28: hw/block/nand: Factor nand_load_iolen() method out (Philippe 
Mathieu-Daudé)
aa88f99c87: qemu-options: Fix CXL Fixed Memory Window interleave-granularity 
typo (Yuquan Wang)
f4729ec39a: hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs 
(Philippe Mathieu-Daudé)
b4295bff25: hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs 
(Philippe Mathieu-Daudé)
ba28e0ff4d: hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (Philippe 
Mathieu-Daudé)
ec0504b989: hw/virtio: Introduce virtio_bh_new_guarded() helper (Philippe 
Mathieu-Daudé)
143bcc1d59: linux-user: Preserve unswapped siginfo_t for strace (Richard 
Henderson)
dcd092a063: accel/tcg: Improve can_do_io management (Richard Henderson)
b338970f8c: target/s390x: Use insn_start from DisasContextBase (Richard 
Henderson)
401aa608d8: target/riscv: Use insn_start from DisasContextBase (Richard 
Henderson)
e231345027: target/microblaze: Use insn_start from DisasContextBase (Richard 
Henderson)
8df1ba49d7: target/i386: Preserve DisasContextBase.insn_start across rewind 
(Richard Henderson)
24638bd17d: target/hppa: Use insn_start from DisasContextBase (Richard 
Henderson)
4642250e3c: target/arm: Use insn_start from DisasContextBase (Richard Henderson)
e7face702a: accel/tcg: Add insn_start to DisasContextBase (Richard Henderson)
07843f75fd: tcg: Add TCGContext.emit_before_op (Richard Henderson)
5888357942: target/m68k: Map FPU exceptions to FPSR register (Keith Packard)
b754cb2dcd: target/sh4: add missing CHECK_NOT_DELAY_SLOT (Zack Buhman)
7227c0cd50: target/sh4: Fix mac.w with saturation enabled (Zack Buhman)
c97e8977dc: target/sh4: Fix mac.l with saturation enabled (Zack Buhman)
7d95db5e78: target/sh4: Merge mach and macl into a union (Richard Henderson)
b0f2f2976b: target/sh4: mac.w: memory accesses are 16-bit words (Zack Buhman)
26d937237f: target/hppa: Fix IIAOQ, IIASQ for pa2.0 (Richard Henderson)
2ee80bce4f: linux-user: replace calloc() with g_new0() (Nguyen Dinh Phi)
f0907ff4ca: linux-user: Fix waitid return of siginfo_t and rusage (Richard 
Henderson)
e25fe886b8: tcg/optimize: Do not attempt to constant fold neg_vec (Richard 
Henderson)
e3404e01c7: edk2: rebuild binaries with correct version information (Gerd 
Hoffmann)
2c4eb439dc: edk2/seabios: use common extra version (Gerd Hoffmann)
6494a08d10: edk2: commit version info (Gerd Hoffmann)
6539c73dcc: edk2: get version + date from git submodule (Gerd Hoffmann)
e1999904a9: qdev-monitor: fix error message in find_device_state() (Vladimir 
Sementsov-Ogievskiy)
f67d296b6e: vhost-user-blk: simplify and fix 
vhost_user_blk_handle_config_change (Vladimir Sementsov-Ogievskiy)
6ae72f609a: vdpa-dev: Fix the issue of device status not updating when 
configuration interruption is triggered (lyx634449800)
2d9a31b3c2: hw/virtio: Fix packed virtqueue flush used_idx (Wafer)
731655f87f: virtio-snd: rewrite invalid tx/rx message handling (Manos 
Pitsidianakis)
a45f09935c: virtio-snd: Enhance error handling for invalid transfers (Zheyu Ma)
4034159c1a: Revert "hw/virtio: Add support for VDPA network simulation devices" 
(Michael S. Tsirkin)
e34f4d87e8: kvm: error out of kvm_irqchip_add_msi_route() in case of full route 
table (Igor Mammedov)
207a2baa16: nanomips: fix warnings with GCC 14 (Paolo Bonzini)
19b254e86a: target/arm: Use correct SecuritySpace for AArch64 AT ops at EL3 
(Peter Maydell)
d1ce2cc95b: Makefile: preserve --jobserver-auth argument when calling ninja 
(Martin Hundebøll)
8e0b21e375: MAINTAINERS: Adjust migration documentation files (Avihai Horon)
7afbdada7e: migration/postcopy: ensure preempt channel is ready before loading 
states (Wei Wang)
9ed866e10f: target/arm: Fix CNTPOFF_EL2 trap to missing EL3 (Pierre-Clément 
Tosi)
d7fe931818: esp.c: remove explicit setting of DRQ within ESP state machine 
(Mark Cave-Ayland)
60c572502c: esp.c: ensure esp_pdma_write() always calls esp_fifo_push() (Mark 
Cave-Ayland)
ffa3a5f2be: esp.c: update esp_fifo_{push, pop}() to call esp_update_drq() (Mark 
Cave-Ayland)
743d873645: esp.c: introduce esp_update_drq() and update esp_fifo_{push, 
pop}_buf() to use it (Mark Cave-Ayland)
2c1017bfc2: esp.c: move esp_set_phase() and esp_get_phase() towards the 
beginning of the file (Mark Cave-Ayland)
3cc70889a3: esp.c: prevent cmdfifo overflow in esp_cdb_ready() (Mark 
Cave-Ayland)
5aa0df4067: esp.c: rework esp_cdb_length() into esp_cdb_ready() (Mark 
Cave-Ayland)
5a50644e47: esp.c: don't assert() if FIFO empty when executing non-DMA SELATNS 
(Mark Cave-Ayland)
266170f91f: esp.c: introduce esp_fifo_push_buf() function for pushing to the 
FIFO (Mark Cave-Ayland)
da8381260b: esp.c: change esp_fifo_pop_buf() to take ESPState (Mark Cave-Ayland)
1f46d1c3a5: esp.c: use esp_fifo_push() instead of fifo8_push() (Mark 
Cave-Ayland)
61fa150d12: esp.c: change esp_fifo_pop() to take ESPState (Mark Cave-Ayland)
0e7dbe29c2: esp.c: change esp_fifo_push() to take ESPState (Mark Cave-Ayland)
1828000b48: esp.c: replace cmdfifo use of esp_fifo_pop() in do_message_phase() 
(Mark Cave-Ayland)
2260402be1: esp.c: replace esp_fifo_pop_buf() with esp_fifo8_pop_buf() in 
do_message_phase() (Mark Cave-Ayland)
f87d048705: esp.c: replace esp_fifo_pop_buf() with esp_fifo8_pop_buf() in 
do_command_phase() (Mark Cave-Ayland)
d103d0db71: esp.c: move esp_fifo_pop_buf() internals to new esp_fifo8_pop_buf() 
function (Mark Cave-Ayland)
bbdf902366: block/virtio-blk: Fix memory leak from virtio_blk_zone_report 
(Zheyu Ma)
8fc4bdc537: pc_q35: remove unnecessary m->alias assignment (Paolo Bonzini)
e497e6a557: lsi53c895a: avoid out of bounds access to s->msg[] (Paolo Bonzini)
1d1ee7e0a1: vga: do not treat horiz pel panning value of 8 as "enabled" (Paolo 
Bonzini)
3b6d2b1962: vga: adjust dirty memory region if pel panning is active (Paolo 
Bonzini)
3826a372e4: vga: move computation of dirty memory region later (Paolo Bonzini)
5c00acebb6: vga: merge conditionals on shift control register (Paolo Bonzini)