QEMU hardens HMP and virtio-gpu; Postgres debates feature reverts

QEMU development led the day with large series on optional monitors, graphics security fixes, and Arm confidential computing, while PostgreSQL hackers opened a heated debate on rolling back recent features. The remaining traffic stayed on QEMU build unification and IOMMU modeling.

QEMU makes HMP compile-time optional

A 49-patch series (discussed as v3 and v4) proposes making the Human Monitor Protocol optional via --disable-hmp so it can later stand alone. The goal is a smaller attack surface and binary. Maintainers of minimal or hardened QEMU builds gain a concrete way to drop a long-standing convenience interface from the trusted computing base.

PostgreSQL debates reverting v19 features after bug spike

On pgsql-hackers, developers are arguing whether to revert several v19 items (RI FK, REPACK, PGQ) after LLM analysis flagged unusually high post-freeze bug counts. The thread, framed as a scary patch contest, drew a dozen participants into a heated dispute. Packagers and extension authors should watch whether committed work is rolled back before release.

QEMU virtio-gpu refactors dmabuf ownership after CVE

An 18-patch RFC series reworks virtio-gpu dmabuf and scanout ownership to address issues found via CVE-2026-66020. Two participants are iterating on the fixes. Operators using guest GPU or virtio-gpu paths have a direct security remediation in flight.

QEMU RFC adds Arm Realm confidential VM support

RFC v3 posts 24 patches adding Arm Realm (CCA/RME) support to QEMU-VMM, building on prior KVM work. The series continues confidential computing enablement on Arm. Teams targeting Arm confidential VMs gain a clearer path once the modeling lands.

QEMU single-binary work links ARM and RISC-V

A 12-patch series extends earlier single-binary efforts by uniquifying symbols and adjusting the build so ARM and RISC-V link into one qemu-system binary. Five participants are reviewing the approach. Distributions that ship multi-arch QEMU packages may simplify packaging if it merges.

QEMU SMMUv3 models Secure state

RFC v5 delivers 28 patches that add Secure state support and register banking to the SMMUv3 model. Three participants are reviewing the hardware fidelity work. Accurate secure-world IOMMU behavior matters for Arm system emulation that depends on it.

QEMU vhost-user proposes isolated memory mode

RFC v2 of a 13-patch series adds an optional memory-isolation mode for vhost-user using bounce buffers and shadow virtqueues. Four participants are discussing the design. Backend authors seeking stronger separation between devices and guest memory have a new option to evaluate.