This bug was fixed in the package qemu - 1:10.2.1+ds-1ubuntu1
---------------
qemu (1:10.2.1+ds-1ubuntu1) resolute; urgency=medium
* Merge with Debian unstable (LP: #2131929):
Among several other backported fixes this will resolve
- qemu-system-any brings in random system emulator with the
new APT solver (LP: #2127053)
- add termios2 support (LP: #2133804)
Remaining changes:
- qemu-kvm to systemd unit
- d/qemu-kvm-init: script for QEMU KVM preparation modules, ksm,
hugepages and architecture specifics
- d/qemu-system-common.qemu-kvm.service: systemd unit to call
qemu-kvm-init
- d/qemu-system-common.install: install helper script
- d/qemu-system-common.qemu-kvm.default: defaults for
/etc/default/qemu-kvm
- d/rules: call dh_installinit and dh_installsystemd for qemu-kvm
- Distribution specific machine type
(LP 1776189 1761372 1769053 2012763 2131822)
- d/p/ubuntu/define-ubuntu-machine-types.patch: define distro machine
types containing release versioned machine attributes
- Add an info about -hpb machine type in debian/qemu-system-x86.NEWS
- ubuntu-q35 alias added to auto-select the most recent q35 ubuntu type
- Enable nesting by default
- d/p/ubuntu/enable-svm-by-default.patch: Enable nested svm by default
in qemu64 on amd
[ No more strictly needed, but required for backward compatibility ]
- tolerate ipxe size change on migrations to >=18.04 (LP 1713490)
- d/p/ubuntu/pre-bionic-256k-ipxe-efi-roms.patch: old machine types
reference 256k path
- d/control-in: depend on ipxe-qemu-256k-compat-efi-roms to be able to
handle incoming migrations from former releases.
- d/qemu-block-extra.postinst: Use latest Ubuntu's QEMU
package version when deciding whether to invoke
'deb-systemd-helper purge'.
- d/control-in: Disable B-D on qemu-system-data, due to that also
- d/rules: Export DEB_BUILD_PROFILES with
pkg.qemu.use-upstream-vdso when building on non-amd64 architectures.
- d/control: Disable B-D on seabios.
- d/rules: Disable upstream tests depending on qemu-system-data
- d/control-in: B-D on multipath libs for multipath persist in
qemu-pr-helper (LP 2117378)
- d/control-in: breaks/replaces for dtb files moving qemu-system-misc
to qemu-system-data
- d/rules: Use upstream vDSO for architecture variant builds (LP 2131236)
* Updated delta:
- d/p/u/define-ubuntu-machine-types.patch: update to match 10.2
* Dropped changes:
- d/p/u/lp2121787/* : Fix migration issues because of missing features
(LP 2121787)
[Fixed in upstream 10.2]
- d/p/u/lp-2123828-*: Fix RISC-V instructions endianness (LP 2123828)
[Fixed in upstream 10.2]
qemu (1:10.2.1+ds-1) unstable; urgency=medium
* new upstream stable/bugfix release
(Closes: #1123670, CVE-2025-14876)
* - fix-PIRQ-bounds-check-in-xen_physdev_map_pirq-CVE-2026-0665.patch
* remove ipxe from FIRMWAREPATH (needs ipxe from trixie and up)
qemu (1:10.2.0+ds-2) unstable; urgency=medium
* two patches to make statically-linked linux-user not depend on nss
(remove linkage to qemu-sockets.c)
* 1095935.patch (Closes: #1095935)
* d/control: qemu-user: mention possibility to sym-link files in
/usr/share/qemu/binfmt.d/ to /etc/binfmt.d/
* d/rules: remove workaround for #1019011 for palcode-clipper -
the bug in gcc has been fixed (in 2022)
* d/control: better versioned dependencies of qemu modules: use
qemu-system-common as a syncronisation point instead of qemu-system-any
(Closes: LP#2127053)
* d/control: finally de-couple qemu-system-riscv and qemu-system-s390x
from qemu-system-misc (remove misc:Depends: riscv, s390x)
* fix-PIRQ-bounds-check-in-xen_physdev_map_pirq-CVE-2026-0665.patch
(Closes: #1125423, CVE-2026-0665)
* d/copyright: fix Files/License sections
qemu (1:10.2.0+ds-1) unstable; urgency=medium
* new upstream release
* d/gbp.conf: switch to 10.2
* d/patches: refresh
* d/control.mk: checked-version: 10.2.0+ds, vdso-version: 1:10.2.0+ds-1~
* d/copyright: rename u-boot-sam460ex bin following upstream change
* d/copyright: add pc-bios/npcm[78]xx_bootrom.bin to Files-Excluded
* d/rules: adjust for u-boot-sam460ex rename, work around build bug,
provide a compat symlink for now
* d/control.mk: 32bit mips and powerpc hosts are not supported anymore
qemu (1:10.1.3+ds-1) unstable; urgency=medium
[ Michael Tokarev ]
* new upstream stable/bugfix release 10.1.3
Closes: #1119917, CVE-2025-12464 (buffer overflow in e1000_receive_iov)
Closes: #1117153, CVE-2025-11234 (UAF in websocket handshake code)
* d/qemu-user.postinst: add the forgotten `set -e'
* d/rules: enable vnc-sasl and vnc password (through nettle)
for xen build (Closes: #1041533)
* remove patches applied upstream:
- linux-user-use-correct-type-for-FIBMAP-and-FIGETBSZ.patch
- tcg-arm-fix-tgen_deposit.patch
[ Heinrich Schuchardt ]
* d/rules: reword build-vdso comment
qemu (1:10.1.2+ds-3) unstable; urgency=medium
* d/control: qemu-system-xen: add the forgotten ipxe-qemu dependency
qemu-system binaries require pxe boot roms for the network adaptors.
When splitting qemu-system-xen into its own package, this dependency
has been forgotten initally, but has been enabled for bookworm (#1035676).
However, this change were lost when uploading the next version of qemu
aimed for trixie. So trixie has this issue too, despite it's been fixed
in bookworm already. (Closes: #1035676, #1120146)
qemu (1:10.1.2+ds-2) unstable; urgency=medium
* d/control: bump seabios dependency to 1.17.0 due to ESP fixes
* linux-user-use-correct-type-for-FIBMAP-and-FIGETBSZ.patch
(Closes: #1119257)
qemu (1:10.1.2+ds-1) unstable; urgency=medium
* new upstream stable/bugfix release
Closes: #1112285 (assertion failure in qemu-system-alpha)
Fixes migration from 10.0 and earlier
qemu (1:10.1.1+ds-1) unstable; urgency=medium
[ Michael Tokarev ]
* new upstream stable/bugfix release
Closes: #1082377, CVE-2024-8354
* removed patches included upstream:
- block-curl-fix-curl-internal-handles-handling.patch
- e1000e-prevent-crash-from-legacy-interrupt-firing-af.patch
- ui-spice-fix-crash-when-disabling-GL-scanout-on.patch
- hw-vfio-user-add-x-pci-class-code.patch
* d/control.mk: checked-version := 10.1.1+ds
* d/control: add python3-distlib:native build-dep variant due to #1115197
* aarch64-linux-user-no-pauth.patch: disable pauth on aarch64 linux-user
by default (Closes: #1113951)
[ Luca Boccassi ]
* qemu-guest-agent: add ConditionVirtualization=vm
* qemu-guest-agent: add Documentation= referring to manpages
-- Hector Cao <[email protected]> Tue, 17 Feb 2026 02:02:42
+0100
** Changed in: qemu (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2024-8354
** CVE added: https://cve.org/CVERecord?id=CVE-2025-11234
** CVE added: https://cve.org/CVERecord?id=CVE-2025-12464
** CVE added: https://cve.org/CVERecord?id=CVE-2025-14876
** CVE added: https://cve.org/CVERecord?id=CVE-2026-0665
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2131929
Title:
Merge qemu from Debian Unstable for resolute
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/2131929/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
