The following changes since commit f8296b816fabd370307cd22b0270b610fc0fa279:

  Merge tag 'pull-loongarch-20260917' of https://github.com/bibo-mao/qemu into staging (2026-09-16 18:24:08 -1000)

are available in the Git repository at:

  https://gitlab.com/kraxel/qemu.git tags/firmware-20260917-pull-request

for you to fetch changes up to a1b96fcde870e49896cddee40459d5feb1f15694:

  hw/uefi: improve default config security (2026-09-17 13:16:02 +0200)

----------------------------------------------------------------
- igvm: add checks to parameter directive processing
- hw/uefi: add check to uefi_vars_mm_lock_variable
- hw/uefi: align default config with upstream edk2

----------------------------------------------------------------

Gerd Hoffmann (3):
  hw/uefi: add missing uefi_str_is_valid check to
    uefi_vars_mm_lock_variable
  hw/uefi: add require-self-signed-pk config option
  hw/uefi: improve default config security

Luigi Leonardi (2):
  igvm: validate and honor byte_offset in parameter directives
  igvm: mark qigvm_find_param_entry as static

 include/hw/uefi/var-service.h  |  1 +
 include/system/igvm-internal.h |  7 +--
 backends/igvm.c                | 95 ++++++++++++++++++++++++----------
 hw/uefi/var-service-auth.c     | 25 +++++----
 hw/uefi/var-service-sysbus.c   |  4 +-
 hw/uefi/var-service-vars.c     |  4 ++
 target/i386/igvm.c             | 12 ++---
 7 files changed, 102 insertions(+), 46 deletions(-)

-- 
2.55.0

On 9/17/26 03:33, Gerd Hoffmann wrote:
> The following changes since commit f8296b816fabd370307cd22b0270b610fc0fa279:
> 
>    Merge tag 'pull-loongarch-20260917' ofhttps://github.com/bibo-mao/qemu into staging (2026-09-16 18:24:08 -1000)
> 
> are available in the Git repository at:
> 
>    https://gitlab.com/kraxel/qemu.git tags/firmware-20260917-pull-request
> 
> for you to fetch changes up to a1b96fcde870e49896cddee40459d5feb1f15694:
> 
>    hw/uefi: improve default config security (2026-09-17 13:16:02 +0200)
> 
> ----------------------------------------------------------------
> - igvm: add checks to parameter directive processing
> - hw/uefi: add check to uefi_vars_mm_lock_variable
> - hw/uefi: align default config with upstream edk2

Applied, thanks.

r~