-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: armel Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 65e24dd0f83359a07bdf16cd23e031c6cbd49b12 207028 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 9037d5d41fc86ca1924e40cf014d6dbb5e2a7d5d 100372 qemu-block-extra_7.2+dfsg-7+deb12u15_armel.deb 2543605f2265c4333df3b85e0a27cdc0f9c0e919 968892 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armel.deb bb44ca230352a851a5aa89c0b3fef91da5017535 307552 qemu-guest-agent_7.2+dfsg-7+deb12u15_armel.deb 46ba1b1c6e25058c7d373c456408f2e98b093b10 35990512 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 6e5502b4d09b989c2e0bca2c8abcbc533151bf3b 7887908 qemu-system-arm_7.2+dfsg-7+deb12u15_armel.deb 33981c3e4bf2cba2c896d22cdc6827bbfc10a830 6842820 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armel.deb be56c99b262890edfa41a8ae05b91ec2545c9009 1944296 qemu-system-common_7.2+dfsg-7+deb12u15_armel.deb 8184280f2a0ab89ac2cbdd9193830c0554ae96de 1038964 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armel.deb ffa5a73ff2896cf4f86f4247cf5ab3f71ad4f62b 280008 qemu-system-gui_7.2+dfsg-7+deb12u15_armel.deb 5acf1abb77adff147f39f2703b2e41a6011e6bb9 47963032 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 7bfd97226eb4c96070f644ab099aedc73048990c 11636972 qemu-system-mips_7.2+dfsg-7+deb12u15_armel.deb afd1a159e23cf83f3e3f20b60a055ac45ef8f9fa 167632776 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb a0e80df80d0f7a9e00f0caac0fbb1dd9fc15bfe3 35587924 qemu-system-misc_7.2+dfsg-7+deb12u15_armel.deb de3895cce728459ede8e9d2345f7b38520a869b4 27968944 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb d642a248b51d53615e527db4ee7c49206ffdb221 6559584 qemu-system-ppc_7.2+dfsg-7+deb12u15_armel.deb 0ed0f2c79c367df47534b7bd358c19c6bb23985b 18437028 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 2abb16553901c618fce9d480fc702a3094c791fe 4350816 qemu-system-sparc_7.2+dfsg-7+deb12u15_armel.deb c1a010badb6917623d3b2833c2e7f1ab997e68f0 25425124 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armel.deb a21271694e7233ce143774bd6ac8a8427cba6097 6211768 qemu-system-x86_7.2+dfsg-7+deb12u15_armel.deb e96d0dc05c1003a4e2669460096e2932b03b46c6 50532 qemu-system_7.2+dfsg-7+deb12u15_armel.deb c002bfc2c886374a57869775c7350d0b1f3e56ca 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_armel.deb 15964c65079c2609ed6fe06497a4d3fb51451c08 125155564 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 497c0dc723fe9c49adb825a5adda114cc550ceec 123997860 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armel.deb ecd012e2be36a10139215123fecaacf5850e70cc 23948432 qemu-user-static_7.2+dfsg-7+deb12u15_armel.deb 07b26725fe89a051b3444b57b39c0db2abd4202e 9636676 qemu-user_7.2+dfsg-7+deb12u15_armel.deb df7ce9d0087461a33a5a8079fcb87dbee31ee671 7195952 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 9c9fb42534385443bf8dd2ee7ca7a8ad3d92b173 1118956 qemu-utils_7.2+dfsg-7+deb12u15_armel.deb 13fe503b02cbdb4cd1802e103b855505a1b20430 29636 qemu_7.2+dfsg-7+deb12u15_armel-buildd.buildinfo Checksums-Sha256: e493231abf7bae9e1705f1e801f38cd4fc48ff2e9ff400ba1b53fc8a6e52a16d 207028 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armel.deb c4680d3e338d157fd80f5f093a2c44f3de0530b8d10cafeb6cf1c6b0743c3d06 100372 qemu-block-extra_7.2+dfsg-7+deb12u15_armel.deb e501e438847287d66eb54332ded178b1b1a0e0a60762bfad47732edfd6a07afa 968892 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 259967ecb249101ec50120f72ce041a8555eab5f84846e70547be4f35ab404ab 307552 qemu-guest-agent_7.2+dfsg-7+deb12u15_armel.deb eeb1ac7ad259dd371a4d04ae199ebee0f84a421b1d8a020b4d48be59b50726a6 35990512 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 4e164947314a507848d09b3564ef4c713c37678eb0c3cecd04e211a6426069cb 7887908 qemu-system-arm_7.2+dfsg-7+deb12u15_armel.deb c890e4ce9e01b52bfe130f1c70df42061dea8c54a477a8d50dead37ff13d6eac 6842820 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armel.deb be725c55f987f351d76ea5b24a641118088ef430cf78b0d87941853e0649182f 1944296 qemu-system-common_7.2+dfsg-7+deb12u15_armel.deb 2e05735191a81eab72e9028f2d198ab30445af51a496a59fb8f31df0026e68be 1038964 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 04b6df8a86b4b210230b70904e080f8848f9e21e97d94ea199c2940af1916db2 280008 qemu-system-gui_7.2+dfsg-7+deb12u15_armel.deb bd042926a9006167923fcb410085973f00896bef325038d05ebcda63503aa3de 47963032 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 1a67bfc68988f3344f7b3871c8fc756d152d8f1277ec057e6bc93b327d9b0d2a 11636972 qemu-system-mips_7.2+dfsg-7+deb12u15_armel.deb 2950a150b1b16260905444cee228f9a6ee04ce8319893e786aee23561bd68ff7 167632776 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb de664b7ec85b9d295bd12d511bebb5b88c027c5d5a6619fa7a91db55d52fbb63 35587924 qemu-system-misc_7.2+dfsg-7+deb12u15_armel.deb 9695ce0a647935d657223410d7de21ed2fbb7bce32bbb5efc88709ee4e297378 27968944 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb e9255e1f0ffff7d669dc72b24b2534b64e5221fb0c665eb093522fb6c5fadfff 6559584 qemu-system-ppc_7.2+dfsg-7+deb12u15_armel.deb 6c9c4833d4cb9f384fc35617b81a7a158979e8775ab670ff8587e7f838c8a98c 18437028 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 34f00e616a8f78e2fd3d26ca6e68e7421196612255fd82300f8c884c8fdda826 4350816 qemu-system-sparc_7.2+dfsg-7+deb12u15_armel.deb 9599d46b9274a5f8ee700b83deb02f1e4671b07c26e4c4efcb46d014fe63bad5 25425124 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 2a234bb5938402ffbebfd72553511840428611a91c04d1bb717f398ba51cf90c 6211768 qemu-system-x86_7.2+dfsg-7+deb12u15_armel.deb 509d6ee2093b993e2d2affd84677e360af0f7127199dcdba1775b2df12c9214a 50532 qemu-system_7.2+dfsg-7+deb12u15_armel.deb 886ce5391051cb93c14a27cf7c20325194532f4319439d44b701ac9e2c48dd31 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_armel.deb 7cde17cd8e62c89c7174c4c381a0819f4664b747fadd801ffc8385bb714b8df9 125155564 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 8aa1761d135da46d0278e75244c7876ce509cd51ebe65bc635bb21fa2fd44366 123997860 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armel.deb fb7297035b291f1d6438b0a8521eb36e843f286ee3999d9434102bf878054f32 23948432 qemu-user-static_7.2+dfsg-7+deb12u15_armel.deb 959d787a84424cd01ac3b93ec5d6c4d16212ed1ecd5d6412c22be2de6be1c63e 9636676 qemu-user_7.2+dfsg-7+deb12u15_armel.deb eb44f978f308241d3c8f9f2364f78d2448e094202ba55fa6c2d3fcf04be609bd 7195952 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armel.deb c44fed7dabe7df1915bc619b1cbfadd2f6318dda93dff872159cdaba24ea05c6 1118956 qemu-utils_7.2+dfsg-7+deb12u15_armel.deb 07b1f3edb87b0a9a6f6c575ff56ff36414bb690d42f43e1c96b8531636dfa9ae 29636 qemu_7.2+dfsg-7+deb12u15_armel-buildd.buildinfo Files: af5d4e8f9e0e1ee81a9f1b3967efbd27 207028 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 32e036d13dac3eef5d9c1def823492a3 100372 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_armel.deb 929b8d0ad3bbd21689e7d22e05947e0e 968892 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 22bb537ef6586ba5ed93287cda34687f 307552 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_armel.deb 645519e26b1370068297c7a44fc7b5cb 35990512 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 02d11acd60e8efd6ee92ac23ed03e36a 7887908 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_armel.deb 24fa9870224c7473b15fa4eddd7c5b3e 6842820 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armel.deb b6b7a9a27f94459aaff01fc385ce617e 1944296 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_armel.deb 98e108a6311ec18d02fce7713d878e38 1038964 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 14949c81738575b16df93cdc283825e4 280008 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_armel.deb cb47af4d7f17bfb4ef4104c56f544ed6 47963032 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armel.deb ed73ed6a1de866c79d19e0b52faed857 11636972 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_armel.deb 60a46dbc85c940487c9a52cd40df4a72 167632776 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 7ca2c99043f4395a87744f861a09b3ec 35587924 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_armel.deb 6cf40a56fc0f065687739c069f9dc9d4 27968944 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 0c15122b80bb278122da418cee70dd55 6559584 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_armel.deb f11f57989ac89457c577b2bd9c761998 18437028 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 0e2d088ac03113879e625824b65a54c7 4350816 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_armel.deb da8915f2fd7291cef784cef9c91efb01 25425124 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armel.deb bbbe5dda8e07f4fa9e7269036f61256c 6211768 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_armel.deb a78aba8de78b5134d3e90e8b177e5559 50532 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_armel.deb e68d73f9f0c4c61c41832bc86779d9a3 5392 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_armel.deb 1057167d8f56bd034c02ca5c4f1e83b5 125155564 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armel.deb eb7a84407327c44250ee4925e35c8a33 123997860 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 6928252a9aba2c4255e0c44dbf9d8dec 23948432 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_armel.deb 40e183467c677f8d2b8f9ea713c76005 9636676 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_armel.deb 140e68e908e40b451667c04446a6fa70 7195952 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armel.deb 242bb970bfa2d18f999b941ed6b9538b 1118956 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_armel.deb a92f994e105809f6fdff65511d9a7906 29636 otherosfs optional qemu_7.2+dfsg-7+deb12u15_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmifpdIACgkQOQKMdMnE H5NGlhAA5W8wFeTUfTCIxWfrFxQM8ABNLzSKauPir9c7RBY7JYHDgYS+sUZpdmLY FczOLVEi36SXOEPk8qlBUEHiXLEL1vuW62WoGwb82cucjSdbxgxMVYLjsIsn0mO9 ExUTmeXkblQQzCsQBxGKbjcBiMyrn8z9+GJeJIjas8YdCW7HoIGgt3L9OqQsEf3m /Jl4FIbq/fd2fjVzdFpbK9BDPRYTYUfizAMJWqjsFTo1Z4z6hY+/O+4IwT4O9sBg tXdhpQAOWzG7aqP8nZkG+kG2M4Lb5tLjNDsp5RuLeSvSmxG82ihGcP7iCxrnPJeq ceRfpDASQZI+wr6XDCBe0Kjobz1SUWH5b9M1SfR0unoO4ONuWoPn6jNlw+Wsi45H TP4JzMe4l5KHbOpZCuofx3mL0LCfGhCymV0pn81Hh9WAAJaViI9N6V0CFXGTAMzG Sl0+BqkXT34SCUGtyS9uAaqNxDNnCdiRIMUqEcGVvpxB9tSuyteluwx4lwx1tcXL e1o5bMxa+ZsIqQo1doq/Lh29WFQ4Az133PWs1+pDVaW9ez3G/IwicNUDs1+PC0Ii oZxfrrdSL6SYk/ZmfXHFY+a/F32Eu8ooUd0TzQ9w0dI/5awmG31EvWlHj7EAUGnB 84wKgqQQEGBZEH5nEzmTVNgmuGQuaqGyYqSDVa0ZORN0MpWLSCQ= =cPXE -----END PGP SIGNATURE-----