QEMU Meson tests, VGA CVE fix, Postgres MV debate

QEMU development dominated the day with a large Meson migration for TCG tests and a security fix for a residual VGA out-of-bounds write. PostgreSQL hackers continued design work on materialized views and publication filters.

QEMU migrates TCG tests to Meson

A 104-patch series on qemu-devel proposes running the full TCG test suite under Meson instead of Makefiles. The change adds proper dependencies and configure-time checks so tests integrate cleanly with the build system. Developers tracking QEMU CI and cross-architecture testing will care because the conversion reduces brittle Make logic and should improve reliability of the guest-code test path.

QEMU VGA fix for CVE-2026-77913

A single patch splits the VGA text renderer geometry cache from the graphics renderer path. The prior graphics-path fix missed an out-of-bounds write now tracked as CVE-2026-77913. Anyone shipping or hardening QEMU guests with VGA emulation needs the separation to close the remaining write vulnerability.

Postgres debates CREATE OR REPLACE for materialized views

Core developers on pgsql-hackers are weighing CREATE OR REPLACE against ALTER for changing a materialized view query. Discussion centers on whether replacement can preserve underlying data and indexes safely. The outcome matters for operators who refresh or redefine large materialized views without full rebuilds.

QEMU wires QOM and qdev properties to QAPI types

A 74-patch series associates QOM and qdev properties with QAPI schema types. The goal is richer introspection of device and object configuration. Tooling and management-layer authors gain clearer typed views of live QEMU object graphs.

QEMU adds IOThread holder tracking

Version 12 of a 15-patch series adds tracking of IOThread holders and exposes them through query-iothreads. Devices and exports become observable as holders of particular threads. Operators debugging latency or affinity issues can see which components pin which IOThreads.

QEMU RFC for vhost-user memory isolation

An RFC v2 series of 13 patches introduces an optional memory-isolation mode for vhost-user. It relies on bounce buffers and shadow virtqueues so the backend need not map full guest memory. Security-sensitive deployments that want tighter process isolation for virtio backends are the intended audience.

Postgres EXCEPT for schema publications under review

Review continues on later revisions of patches that add EXCEPT support for TABLES IN SCHEMA publications. Focus is on conflict detection involving inheritance and partitions. Logical-replication users who publish whole schemas while excluding specific tables will depend on the final rules.

QEMU SMMUv3 gains Secure state support

RFC v5 posts a 28-patch series adding Secure state support and register banking to the SMMUv3 model. ARM guests that rely on secure-world IOMMU behavior can be exercised more completely in QEMU. Platform and firmware developers targeting TrustZone-style setups are the primary beneficiaries.