Commit 562bae590f for qemu.org

commit 562bae590f194fb590beb5c65da44fc35ab9f64a
Merge: 324bb5ef83 5c3c500cdd
Author: Richard Henderson <richard.henderson@linaro.org>
Date:   Wed Aug 26 13:40:41 2026 -0700

    Merge tag 's390x-20260826' of https://gitlab.com/efarman/qemu into staging

    New s390x features for 11.2
     - hardening fixes in css/sclp code
     - enable secure IPL
     - regenerate s390-ccw.img

    # -----BEGIN PGP SIGNATURE-----
    #
    # iIsEABYKADMWIQQB3Dhbwk4ZE3uUN6KmTx4R4Fx3tAUCao7epBUcZmFybWFuQGxp
    # bnV4LmlibS5jb20ACgkQpk8eEeBcd7RWCgEA4IEg3vbJTOPAxRzi/nEZKh83ZSkJ
    # tO+OuqkaJ1cbYfsA/289NUJHlvdV31ZXxbt4hnD2O/67Oo+B01FRtgvRwjQN
    # =mB3y
    # -----END PGP SIGNATURE-----
    # gpg: Signature made Wed 26 Aug 2026 05:40:04 AM PDT
    # gpg:                using EDDSA key 01DC385BC24E19137B9437A2A64F1E11E05C77B4
    # gpg:                issuer "farman@linux.ibm.com"
    # gpg: Good signature from "Eric Farman <farman@linux.ibm.com>" [unknown]
    # gpg: WARNING: The key's User ID is not certified with a trusted signature!
    # gpg:          There is no indication that the signature belongs to the owner.
    # Primary key fingerprint: D2C6 0504 C9E8 F568 CFE5  87B5 3827 B212 71BF 9562
    #      Subkey fingerprint: 01DC 385B C24E 1913 7B94  37A2 A64F 1E11 E05C 77B4

    * tag 's390x-20260826' of https://gitlab.com/efarman/qemu: (37 commits)
      pc-bios/s390-ccw.img: update s390x bios
      MAINTAINERS: Add secure IPL files to S390-ccw boot group
      docs/system/s390x: Add secure IPL documentation
      docs/specs: Add secure IPL documentation
      tests/functional/s390x: Add secure IPL functional test
      hw/s390x/ipl: Handle secure boot with multiple boot devices
      pc-bios/s390-ccw: Handle true secure IPL mode
      hw/s390x/ipl: Set IPIB flags for secure IPL
      Add secure-boot to s390-ccw-virtio machine type option
      pc-bios/s390-ccw: Add additional security checks for secure boot
      s390x: Guest support for Secure-IPL Code Loading Attributes Facility (SCLAF)
      pc-bios/s390-ccw: Add signed component address overlap checks
      pc-bios/s390-ccw: Add signature verification for secure IPL in audit mode
      pc-bios/s390-ccw: Introduce ZiplBootMode enum for IPL mode selection
      pc-bios/s390-ccw: Rework zipl_load_segment function
      pc-bios/s390-ccw: Refactor zipl_run()
      s390x: Guest support for Secure-IPL Facility
      hw/s390x/ipl: Rework s390_ipl_map_iplb_chain for certificate storage
      hw/s390x/ipl: Add IPIB flags to IPL Parameter Block
      pc-bios/s390-ccw: Define memory for IPLB and convert IPLB to pointers
      ...

    Signed-off-by: Richard Henderson <richard.henderson@linaro.org>