This is a point release containing security fixes and bug fixes.

Security Fixes

This release fixes a security vulnerability in disk image handling.
Details can be found in
GHSA-jmr4-g2hv-mjj6.

• A new backing_files=on|off option has been added to --disk to
  explicitly control whether QCOW2 backing files are permitted. This
  defaults to off to prevent the loading of backing files entirely.
  (vmm: Add option to control backing files #7685)
• Explicit image type specification via the user interface, removing
  reliance on format autodetection (Add more resiliency to disk image format handling #7728).
• Prevent sector-zero writes for autodetected raw images (Add more resiliency to disk image format handling #7728).

Bug Fixes

• Fix various inconsistencies in our OpenAPI specification file
  (vmm: api: Expose the nested option in API description #7716, vmm: openapi: Sync DiskConfig OpenAPI spec #7726)
• Fix QCOW2 thread safety for multiple virtio queues
  (num_queues > 1) (block: qcow: Fix QCOW2 thread safety for multiple virtio queues #7661)