-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Oct 2026 09:59:36 +0300
Source: qemu
Architecture: source
Version: 1:11.1.3+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org>
Changed-By: Michael Tokarev <mjt@tls.msk.ru>
Changes:
qemu (1:11.1.3+ds-1) unstable; urgency=medium
.
* new upstream stable/bugfix release (remove applied patches). CVEs fixed:
CVE-2026-7180 CVE-2026-18204 CVE-2026-18410 CVE-2026-18609 CVE-2026-97889
CVE-2026-101291 CVE-2026-111819
* d/control: bump qemu-system-data version in Build-Depends for tests
to current upstream major version
* stop (re)building upstream-provided vdso files, always use them directly.
Neither debian nor ubuntu has infrastructure to build them.
It might be possible to verify if we can rebuild upstream-provided blobs
in a reproducible way, but so far, upstream does not build them that
way (unstripped binaries has temporary .o file name which is always
different). At least, I can try stripping the blobs and comparing
the results.
Checksums-Sha1:
52c7ef3d5ad5049b422e2a35d82fdecee68916a8 9743 qemu_11.1.3+ds-1.dsc
33a51eb6feb0041892fd9c2b63fb56f18d7f0475 39239656 qemu_11.1.3+ds.orig.tar.xz
846e6889db93653b2088c4eb22a84f0d34e05583 134732 qemu_11.1.3+ds-1.debian.tar.xz
4b1b5f43870ed947a4e6e7bf3523be5a2b7b6a33 8399 qemu_11.1.3+ds-1_source.buildinfo
Checksums-Sha256:
f956bbe78adba4394e8dda4552bb32e9c4d3d66eb38d5f480981f84b887811b9 9743 qemu_11.1.3+ds-1.dsc
502fe33503df3520b6a81176a94d77eef908eb252bacc675d7199f379ac26641 39239656 qemu_11.1.3+ds.orig.tar.xz
e8d0970234e4dbad7c2590c1538bfed0689aa7fdf6bfbe06bf5982aba71cc15e 134732 qemu_11.1.3+ds-1.debian.tar.xz
9e7bf166ce0808dfce4e95a9528cc8690f73794b19d54caba6753701e6073675 8399 qemu_11.1.3+ds-1_source.buildinfo
Files:
6aed4cba90f778c17e0ac5ee3343c33c 9743 otherosfs optional qemu_11.1.3+ds-1.dsc
16a709d86f3920ae62deaaafbc87ccbd 39239656 otherosfs optional qemu_11.1.3+ds.orig.tar.xz
1df8fc9f3cef8991b6954f96933fa074 134732 otherosfs optional qemu_11.1.3+ds-1.debian.tar.xz
4d0a369219cb860b9f99d2e73fc42c63 8399 otherosfs optional qemu_11.1.3+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=C5BJ
-----END PGP SIGNATURE-----
