The following patches are queued for QEMU stable v10.2.2:

  https://gitlab.com/qemu-project/qemu/-/commits/staging-10.2

Patch freeze is 2026-03-15, and the release is planned for 2026-03-17:

  https://wiki.qemu.org/Planning/10.2

This review/release cycle is a bit shorter than usual, because
of a few security fixes accumulated in there.

Please respond here or CC qemu-stable@nongnu.org on any additional patches
you think should (or shouldn't) be included in the release.

The changes which are staging for inclusion, with the original commit hash
from master branch, are given below the bottom line.

Thanks!

/mjt

--------------------------------------
01 00ebc44514a6 Jaehoon Kim:
   s390x/pci: Fix endianness for zPCI BAR values.
02 b0353beebb0c Mohamed Mediouni:
   plugins: fix cross-build using LLVM for Windows targets
03 4a7b1bd18d2e Fiona Ebner:
   block/mirror: check range when setting zero bitmap for sync write
04 267d7ae99a1d Fiona Ebner:
   iotests: test active mirror with unaligned, small write zeroes op
05 e44a26ba9402 John Snow:
   python: drop uses of pkg_resources
06 90fabd5ddace Alex Bradbury:
   contrib/plugins/hotblocks: Correctly free sorted counts list
07 1c1e45fcd662 Alex Bradbury:
   contrib/plugins/hotblocks: Fix off by one error in iteration of sorted 
   blocks
08 e777f6ab9140 Alex Bradbury:
   contrib/plugins/hotblocks: Print uint64_t with PRIu64 rather than PRId64
09 e4ed74c9aef6 Alex Bradbury:
   docs/about/emulation: Add documentation for hotblocks plugin arguments
10 c2c5beec42bf Jamin Lin:
   hw/i2c/aspeed_i2c: Fix out-of-bounds read in I2C MMIO handlers
11 42eab40a12f1 Peter Maydell:
   target/arm: Account for SME in aarch64_sve_narrow_vq() assertion
12 ee5bf0962ed6 Peter Maydell:
   target/arm: Fix feature check in DO_SVE2_RRX, DO_SVE2_RRX_TB
13 433097a22421 Peter Maydell:
   target/arm/tcg: Allow SVE RAX1 in SME2p1 streaming mode
14 aeb3c147fc4a Peter Maydell:
   target/arm: Don't let 'sme=on' downgrade SME
15 16786eb7bf86 Helge Deller:
   hw/hppa: Add BMC on 64-bit machines only
16 b2a279094c3b Akihiko Odaki:
   virtio-gpu-virgl: Add virtio-gpu-virgl-hostmem-region type
17 34238f078a04 Manos Pitsidianakis:
   virtio-snd: remove TODO comments
18 61679d7dcfa2 Manos Pitsidianakis:
   virtio-snd: handle 5.14.6.2 for PCM_INFO properly
19 bcb53328aa70 Manos Pitsidianakis:
   virtio-snd: fix max_size bounds check in input cb
20 7994203bb1b8 Manos Pitsidianakis:
   virtio-snd: tighten read amount in in_cb
21 8608ed356ef9 Kuan-Wei Chiu:
   hw/misc/virt_ctrl: Fix incorrect trace event in read operation
22 669683cf1414 Weixie Cui:
   hw/ssi/xilinx_spips: Reset TX FIFO in reset
23 662fd548a027 Alex Bennée:
   target/arm: set the correct TI bits for WFIT traps
24 c96f6d2398a9 Richie Buturla:
   hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
25 b72d15f47cbd Christian Schoenebeck:
   hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth 
   driver
26 48c8916aec43 Josh Poimboeuf:
   hw/i386/vmmouse: Fix hypercall clobbers
27 c86bca1671e9 Bernhard Beschow:
   target/i386/emulate/x86_decode: Fix compiler warning
28 529e5e764307 Bernhard Beschow:
   target/i386/hvf/x86_mmu: Fix compiler warning
29 1b93832f5592 Bernhard Beschow:
   target/i386/emulate/x86_decode: Actually use stream in 
   decode_instruction_stream()
30 78c6b6010ce7 Peter Maydell:
   target/ppc/translate: Fix TCG debug assert translating CLRBWIBC
31 163cd0ae1182 Daniel P. Berrangé:
   io: separate freeing of tasks from marking them as complete
32 d39d0f3acdd7 Daniel P. Berrangé:
   io: fix cleanup for TLS I/O source data on cancellation
33 9545c059f77e Daniel P. Berrangé:
   io: fix cleanup for websock I/O source data on cancellation
34 d8e19f8042dc Peter Maydell:
   hw/net/smc91c111: Don't allow negative-length packets
35 cfda94eddb6c Halil Oktay (oblivionsage):
   block/vmdk: fix OOB read in vmdk_read_extent()
36 6f7b0a23a6ea Antoine Damhet:
   block/curl: fix concurrent completion handling
37 0f51f9c3420b Kevin Wolf:
   mirror: Fix missed dirty bitmap writes during startup
38 d4816177654d Dmitry Guryanov:
   block/throttle-groups: fix deadlock with iolimits and muliple iothreads
39 544ddbb6373d Kevin Wolf:
   block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
40 1d6610099bd7 Hanna Czenczek:
   block/nfs: Do not enter coroutine from CB
41 2ae361ef1d7d Jens Axboe:
   aio-posix: notify main loop when SQEs are queued
42 961fcc0f2276 Jens Axboe:
   fdmon-io_uring: check CQ ring directly in gsource_check
43 235f9b36383e Dmitry Osipenko:
   virtio-gpu: Ensure BHs are invoked only from main-loop thread
44 6595a8d5d17e Peter Maydell:
   hw/net/xilinx_ethlite: Check for oversized TX packets
45 f2813e13fe91 Bingwu Zhang:
   linux-user: Deal with mmap where start > reserved_va
46 e8e7d1f97785 Bingwu Zhang:
   bsd-user: Deal with mmap where start > reserved_va
47 c865b6bce5d0 Bingwu Zhang:
   tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
48 6a1221614fd9 Andreas Schwab:
   linux-user: fix TIOCGSID ioctl
49 550391c7134d Peter Maydell:
   hw/net/npcm_gmac: Catch accesses off the end of the register array
50 1e3e1d51e20e Peter Maydell:
   hw: Make qdev_get_printable_name() consistently return freeable string
51 db2325f79481 rail5:
   target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
52 2d877bc02a3b rail5:
   target/loongarch: Preserve PTE permission bits in LDPTE
53 a3fcbca0ef64 Hanna Czenczek:
   fuse: Copy write buffer content before polling