[ Reason ]
This is a new upstream stable/bugfix release (in 10.0.x LTS series),
fixing a big number of defects all over the places, including several
security fixes:
CVE-2026-6425
CVE-2026-8343
CVE-2026-48002
CVE-2026-48003
CVE-2026-48004
CVE-2026-48914 (#1139923)
CVE-2026-48915
[ Tests ]
The release passes upstream testsuite (not all of it unfortunately,
since some test environments, for example cirrus-ci, has been shut
down).
I also verified it with my usual set of guest images, including
several versions of Windows, a few releases of Linux, Hurd and FreeBSD
guests, - with no noticed new issues.
[ Risks ]
As usual with qemu stable releases, there are many changes in there.
But most of them are simple, focused, and easy to check.
Usually the risk is rather small.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
See debian/changelog (first in debdiff below) for a short list of
upstream commits. A more useful list might be found in git (mirrored
on salsa), https://salsa.debian.org/qemu-team/qemu/-/commits/upstream-10.0 ,
especially https://salsa.debian.org/qemu-team/qemu/-/commits/v10.0.11 ,
up to v10.0.10 tag (which is queued up for trixie inclusion, #1139679).
[ Other Info ]
I'm uploading this version into the archive to save a round-trip here and
to - hopefully - reduce load on the release team a little bit. Feel free
to reject it.
Thanks,
/mjt