SUSE-SU-2026:0039-1

This update for qemu fixes the following issues:

• CVE-2024-6505: qemu-kvm: virtio-net: Fixed queue index out-of-bounds access in software RSS (bsc#1227397)
• CVE-2025-12464: net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002)
• CVE-2025-11234: qemu-kvm: Fixed use-after-free in websocket handshake code leading to denial of service (bsc#1250984)

Other fixes:

• Fixed *-virtio-gpu-pci dependency on ARM (bsc#1254286)
• block/curl: Fixed curl internal handles handling (bsc#1252768)