[ANNOUNCE] QEMU 11.1.0-rc3 is now available

Hello,

On behalf of the QEMU Team, I'd like to announce the availability of the
fourth release candidate for the QEMU 11.1 release. This release is meant
for testing purposes and should not be used in a production environment.

  http://download.qemu.org/qemu-11.1.0-rc3.tar.xz
  http://download.qemu.org/qemu-11.1.0-rc3.tar.xz.sig

You can help improve the quality of the QEMU 11.1 release by testing this
release and reporting bugs using our GitLab issue tracker:

  https://gitlab.com/qemu-project/qemu/-/milestones/19

The release plan, as well a documented known issues for release
candidates, are available at:

  http://wiki.qemu.org/Planning/11.1

Please add entries to the ChangeLog for the 11.1 release below:

  http://wiki.qemu.org/ChangeLog/11.1

Thank you to everyone involved!

Changes since rc2:

3e3ccab106: Update version for v11.1.0-rc3 release (Stefan Hajnoczi)
9232220004: gitlab: disable provenance attestations to work around CI bug (Stefan Hajnoczi)
dd272c8c87: qapi/dump: add allowed-by-guest feature to win-dmp (Denis V. Lunev)
5ce01c9238: hw/display/virtio-gpu: Unmap DMA regions on reset (Bin Guo)
d513c644b8: hw/display/virtio-gpu: Always reject invalid scanout bounds (Akihiko Odaki)
1f24066fc8: virtio-gpu: reject requests with short/truncated control headers (Ankur Saini)
555d0a1eba: hw/display/virtio-gpu: drop redundant node->value NULL checks (Marc-André Lureau)
b8ef970532: hw/display/virtio-gpu: fix offset wraparound in scanout_blob_to_fb (Marc-André Lureau)
a113e0c53f: vhost-user-gpu: fix integer overflow in buffer allocation (Marc-André Lureau)
95687639e6: hw/display/vga: fix panning_buf OOB after text/graphics switch (Marc-André Lureau)
241095547a: hw/display/virtio-gpu: validate blob iov size (Marc-André Lureau)
29922afeae: iotests: increase timeouts for tests to 5 minutes (Daniel P. Berrangé)
431f59a34d: hw/block/fdc: report a missing address mark on an empty drive (Christian Quante)
d00567f7fb: hw/block/fdc: select the drive named by the READ ID command (Christian Quante)
7d06bbb2d9: iotests: test O_TRUNC behavior for fuse exports (Fiona Ebner)
7a34f7b879: hw/nvme: fix leak on copy ranges (Klaus Jensen)
86f938333e: hw/nvme: cancel inflight requests on controller reset (Minwoo Im)
849ea354dd: hw/nvme: factor out nvme_sq_cancel_inflight() (Minwoo Im)
1d5e53df16: hw/nvme: drop AER requests without aiocb in nvme_del_sq() (Minwoo Im)
b9ad1c4396: block/export/fuse: fix regression with O_TRUNC when export is not growable (Fiona Ebner)
e554413bd2: coroutine: fix lost wakeup in qemu_co_sleep_wake() (Denis V. Lunev)
5add514ba3: iotests/migrate-bitmaps-postcopy-test: replace the timing assertion with a content check (Denis V. Lunev)
951227d375: iotests: skip FUSE tests when FUSE is not usable (Denis V. Lunev)
43e4791d99: iotests: run the test pool with the 'fork' start method (Denis V. Lunev)
fe0f9e3ab2: qcow2: do not try to clear the dirty bit on a read-only node (Denis V. Lunev)
370882d086: dmg: reject inconsistent UDRW chunk sector count and length (CVE-2026-65928) (Stefan Hajnoczi)
ab7b872f0c: dmg: refuse to open files with no chunks (Stefan Hajnoczi)
0c43f801c0: dmg: fix out-of-bounds load in search_chunk() (CVE-2026-65929) (Stefan Hajnoczi)
842c89281a: tests/unit: add reproducer for BlockAcctStats histogram locking race (Denis V. Lunev)
16f94ef4c6: block/qapi: take stats->lock when reading BlockAcctStats for query-blockstats (Denis V. Lunev)
5b0ba385a0: block/accounting: take stats->lock in latency histogram setters (Denis V. Lunev)
0d3db94a88: block/cloop: fix integer overflow in total_sectors calculation (malike)
338d81b22b: vfio/pci: Guard accel_irqchip_begin_route_changes() calls (Cédric Le Goater)
f498c21b35: hw/vfio: Fix liveness check in vfio_connect_kvm_msi_virq() (Tycho Andersen (AMD))
c25f69595a: target/i386: Update cc_op for SAHF (Richard Henderson)
c490037c13: target/arm: Remove stale comment about WFE/SEV implementation (Peter Maydell)
d88781a4e8: target/arm: Make YIELD, WFI and WFE be NOPs on pre-v6K (Peter Maydell)
dd0d695306: target/arm: Don't NOP the SEV insn on v6K CPUs (Peter Maydell)
702252a0db: target/arm: Fix b16b16 feature test for SME2 BFCLAMP, BFMAX, BFMIN (Richard Henderson)
8d0ac5933a: linux-user/aarch64: Fix SHADOW_STACK_SET_TOKEN (Richard Henderson)
518a4aa01b: linux-user: fix incorrect msg_l[sr]pid members of target_msqid_ds (no92)
9e3df3019d: linux-user: Fix msqid_ds struct wrt 32-bit big endian architectures (Helge Deller)