The following changes since commit ee7eb612be8f8886d48c1d0c1f1c65e495138f83:

  Merge tag 'single-binary-20260506' of https://github.com/philmd/qemu into staging (2026-05-06 10:45:02 -0400)

are available in the Git repository at:

  https://gitlab.com/kraxel/qemu.git tags/firmware-20260508-pull-request

for you to fetch changes up to b4680c02b8e838c75691656ee2c4450b454d1ca7:

  hw/uefi: avoid possibly unaligned variable_auth_2 struct field access (2026-05-08 09:12:11 +0200)

----------------------------------------------------------------
hw/uefi: collection of CVE fixes.

----------------------------------------------------------------

Gerd Hoffmann (6):
  hw/uefi: fix buffer overruns
  hw/uefi: verify pio_xfer_offset before calculating buffer checksum
  hw/uefi: fix ucs2 string helper functions
  hw/uefi: add name_size check to uefi_vars_mm_lock_variable()
  hw/uefi: verify data size before accessing it in wrap_pkcs7
  hw/uefi: avoid possibly unaligned variable_auth_2 struct field access

 hw/uefi/var-service-auth.c  | 21 +++++++++++--------
 hw/uefi/var-service-core.c  |  4 ++++
 hw/uefi/var-service-pkcs7.c | 21 ++++++++++++-------
 hw/uefi/var-service-utils.c | 42 +++++++++++++++++++++----------------
 hw/uefi/var-service-vars.c  | 22 +++++++++++++++----
 5 files changed, 71 insertions(+), 39 deletions(-)

-- 
2.54.0

Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/11.1 for any user-visible changes.