{"id":100067,"date":"2021-04-30T16:23:15","date_gmt":"2021-04-30T14:23:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-emulyatora-qemu-6-0"},"modified":"2021-04-30T16:23:15","modified_gmt":"2021-04-30T14:23:15","slug":"vypusk-emulyatora-qemu-6-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-emulyatora-qemu-6-0","title":{"rendered":"Release of QEMU 6.0 emulator","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of QEMU 6.0 has been announced. As an emulator, QEMU allows you to run programs built for one hardware platform on a system with a completely different architecture, for example, running an ARM application on an x86-compatible PC. In virtualization mode, the performance of code execution in an isolated environment is close to that of a hardware system due to direct execution of instructions on the CPU and the involvement of the Xen hypervisor or KVM module. <\/p>\n
The project was originally created by Fabrice Bellard to enable the execution of Linux executable files built for the x86 platform on architectures different from x86. Over the years of development, support for full emulation of 14 hardware architectures has been added, and the number of emulated hardware devices has exceeded 400. For version 6.0, more than 3,300 changes have been made by 268 developers. <\/p>\n
Key improvements added in QEMU 6.0: <\/p>\n
\n
The NVMe controller emulator has been updated to comply with the NVMe 1.4 specification and equipped with experimental support for zoned namespaces, multipath I\/O, and end-to-end data encryption on storage.\n
Experimental options «-machine x-remote» and «-device x-pci-proxy-dev» have been added to export device emulation to external processes. Currently, only SCSI adapter emulation lsi53c895 is supported in this mode.\n
Experimental support for creating snapshots of RAM contents has been added.\n
A FUSE module has been added for exporting block devices, allowing the mounting of any block device state snapshot used in the guest system. Export is performed through the QMP command block-export-add or via the «—export» option in the qemu-storage-daemon utility.\n
The ARM emulator now supports the ARMv8.1-M architecture ‘Helium’ and Cortex-M55 processors, as well as extended ARMv8.4 instructions TTST, SEL2, and DIT. Support for ARM boards mps3-an524 and mps3-an547 has been added. Additionally, enhanced device emulation has been implemented for xlnx-zynqmp, xlnx-versal, sbsa-ref, npcm7xx, and sabrelite boards.\n
For ARM in system-level and user environment emulation modes, support for the ARMv8.5 MTE (Memory Tagging Extension) has been implemented, allowing tags to be associated with each memory allocation operation and enabling pointer checks during memory access that must be linked to the correct tag. This extension can be used to block exploitation of vulnerabilities caused by accessing already freed memory blocks, buffer overflows, accesses before initialization, and use outside the current context.\n
The 68k architecture emulator now supports a new type of emulated machine «virt», utilizing virtio devices for performance optimization.\n
The x86 architecture emulator has introduced the capability to apply AMD SEV-ES (Secure Encrypted Virtualization) technology for encrypting processor registers used in the guest system, making the contents of the registers inaccessible to the host environment unless the guest system explicitly grants access to them.\n
The classic TCG (Tiny Code Generator) code generator has added support for the PKS (Protection Keys Supervisor) mechanism during x86 system emulation, which can be used to protect access to privileged memory pages.\n
The MIPS architecture emulator has introduced a new type of emulated machine «virt» with support for Chinese Loongson-3 processors.\n
In the PowerPC architecture emulator for emulated machines «powernv», support has been added for external BMC controllers. For the emulated pseries machines, notifications about errors will be provided when attempting to hot unplug memory and CPU.\n
Support for emulating Qualcomm Hexagon processors with DSP has been added.\n
The classic TCG (Tiny Code Generator) has added support for macOS host environments on systems with the new Apple M1 ARM chip.\n
The RISC-V architecture emulator now supports QSPI NOR flash for Microchip PolarFire boards.\n
The Tricore emulator has added support for a new model of TriBoard boards, emulating the Infineon TC27x SoC.\n
In the ACPI emulator, it is now possible to assign network adapter names in guest systems that are independent of the connection order to the PCI bus.\n
Support for the FUSE_KILLPRIV_V2 option has been added to virtiofs to enhance the performance of guest systems.\n
VNC now supports cursor transparency and screen resolution scaling via virtio-vga, based on the window size.\n
QMP (QEMU Machine Protocol) has added support for asynchronous parallel access when performing backup tasks.\n
The USB emulator now allows saving traffic generated while working with USB devices into a separate pcap file for later inspection in Wireshark.\n
New QMP commands load-snapshot, save-snapshot, and delete-snapshot have been added for managing qcow2 snapshots.\n
Vulnerabilities CVE-2020-35517 and CVE-2021-20263 have been fixed in virtiofs. The first issue allows access to the host environment from the guest system by creating a special device file in a directory shared with the host environment by a privileged user in the guest system. The second issue is caused by an error when processing extended attributes in the ‘xattrmap’ option and may lead to write permissions being ignored and privilege escalation within the guest system. <\/ul>\n