-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: armhf Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: ab8d0b123e28b2717263568fa906166ba1ee5e50 208572 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 180242d743b89e90aceca347890327f3365c8ae3 98984 qemu-block-extra_7.2+dfsg-7+deb12u15_armhf.deb 076ebf322f82c5c8a9e5296529a498e8203e4f41 971724 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 8052a5728f6f348978b13a261cb8a9971c652e18 309868 qemu-guest-agent_7.2+dfsg-7+deb12u15_armhf.deb ec81b9bf25cfb12413eb37a9c8b26d87111f6ac0 36344268 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 2fb4206799fe6086cc370a74ba8834fecd167ad5 7978568 qemu-system-arm_7.2+dfsg-7+deb12u15_armhf.deb c4f620694abebec6d12e02ba819ef3ee3754ccff 6893768 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 51be132f657a00a600bf12fdf941e750a0afee20 1965408 qemu-system-common_7.2+dfsg-7+deb12u15_armhf.deb 6054f5ef4a522cd0bab61e6ee3478a545a77ec77 1040260 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 27fbdb8f2ee6bb2b04b161641ab33e7aa3fbd3b3 283304 qemu-system-gui_7.2+dfsg-7+deb12u15_armhf.deb 69c0ede37db21affac9a1937bdd25ff07a0b8741 48663644 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb e6abc88bfa4ef32180d2aa6486ff3ee3e7ad483d 11733128 qemu-system-mips_7.2+dfsg-7+deb12u15_armhf.deb 2192775fc285653b67d380ee3cd3d5670ffdc636 170290392 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb d51609e510db7d90ca25efdcc065a98d68477d7a 29195648 qemu-system-misc_7.2+dfsg-7+deb12u15_armhf.deb a0721939083a5217945144bf87d6a5c7bd4bb8fd 28355096 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb bf5002631be651c5d000c1e68b14408fc18e46e6 6633308 qemu-system-ppc_7.2+dfsg-7+deb12u15_armhf.deb 6288d7814baa91e4afa73791e9ff46d10b59e8b6 18734780 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 3ddd77fd95390c314373162df2e6b441da859c24 3445036 qemu-system-sparc_7.2+dfsg-7+deb12u15_armhf.deb 75aca03b5d19c44b79a6799e179882595f34d281 25819508 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 6f26658fd18c1d4c618110976d7a13a09717273f 6276112 qemu-system-x86_7.2+dfsg-7+deb12u15_armhf.deb c1158808afeac47e2de4a434e56dd227fcde6068 50536 qemu-system_7.2+dfsg-7+deb12u15_armhf.deb 9443da34f6d4e282173bfa73224ce2fb7c328ecc 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_armhf.deb 4f85a455a1f5f01e77ba05b8fcb40f9cf0ede5a7 127006008 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 9a471a0bd43069e6d956bdab601fef0cf4ea5763 125690128 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb e95254306db3d4ee0b15ece827dd8bb284ab96a0 20581896 qemu-user-static_7.2+dfsg-7+deb12u15_armhf.deb 816b2110741c97d8f390182f4487ec5d07e03810 9322452 qemu-user_7.2+dfsg-7+deb12u15_armhf.deb bb103e7cde89c7cb8e42b9f699d45335648c9d2f 7292988 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb bdbcc199a9133ea66ecbb397b77a0150cba071a8 1129996 qemu-utils_7.2+dfsg-7+deb12u15_armhf.deb 7bb98de1aa42002a70bff3a7e0def754569768fb 29699 qemu_7.2+dfsg-7+deb12u15_armhf-buildd.buildinfo Checksums-Sha256: 551b434b250143c4e7580634f46ded921e4a287605b90d9a3eb3966f43d8b4f4 208572 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb dcbb04612928ed1ca5ebb059288512572d20a45465b744ede744c33f8fc2eb27 98984 qemu-block-extra_7.2+dfsg-7+deb12u15_armhf.deb 3f65635652b249c81c96599406b53ef75e28582752085a3f9cf791f8aeaecc05 971724 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb b420c7048cb01d46ae41b8f1bb977ff4e1d4bf1014a92632a53f21b0a30d9795 309868 qemu-guest-agent_7.2+dfsg-7+deb12u15_armhf.deb 7b21d31151db313db2a247d202d40d26df7e84f46786b18f8e2ada4e8df92b8a 36344268 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb f9f2ed79b188c3e1bc422285b4d76f13d785611f9da584e090ae6eefcb50731c 7978568 qemu-system-arm_7.2+dfsg-7+deb12u15_armhf.deb c58239f7ecf8d76e81d8f8f29bdda5e774dcc72e32e841ee029792277dc6f6b0 6893768 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 83a0dea2205e1768bc3c1e22364585ca724937ceeaa1ece6a86d0b58d9685d00 1965408 qemu-system-common_7.2+dfsg-7+deb12u15_armhf.deb ebcea8a73fc9c2aea0835ca00d09dedb31d6ac17c84802199b639787684a9712 1040260 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb cba6820b16563fe820d70eedad18413203e43f419cbd52e6e94d00ab4878d41c 283304 qemu-system-gui_7.2+dfsg-7+deb12u15_armhf.deb fe07321c5d5181303003499d317319f331931c7562b7ca0a23d99cd4ff0d4e6e 48663644 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb fbb799e123aaa60f5aebc2e76908f7f121c0a47c5327df7a694b898352c91e7e 11733128 qemu-system-mips_7.2+dfsg-7+deb12u15_armhf.deb 1e13c2345508e9e468f2a0e5b1093f316356c264564ba631c9efe49fd6f45ba9 170290392 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 8d67c6f0d922c588fcfccf6dab4c24c785b77e80644de39c03213b7f380ee5e6 29195648 qemu-system-misc_7.2+dfsg-7+deb12u15_armhf.deb 1432b0a93eaba6c740cb4cc205996be18cdd2c5d7c2a226b91ae662b4417648b 28355096 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb e5a19efc0fcf029a6fb2a587d163f5ca833fdd26f976e6fac14bb135ad37ef3b 6633308 qemu-system-ppc_7.2+dfsg-7+deb12u15_armhf.deb 40b3a7db7b99c70c9b0a3619c27ce1fb857c5257a1c6d1b336a8ac63d5c2b4a0 18734780 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 8084b13c275624e2f4f5cdabde9c4294f593d3d744669ff2c34ad6fbb2b82ab3 3445036 qemu-system-sparc_7.2+dfsg-7+deb12u15_armhf.deb f9035a8e149f123515cb42b5837765b89095007c2e194950f63472bed513445f 25819508 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb b6b204a7003ae283edf0902e028c41be82081c6683974031b24b98edeaac49fc 6276112 qemu-system-x86_7.2+dfsg-7+deb12u15_armhf.deb ddce10a353acd5b20427de9fda91f5c8cc2fa6979a078f38b6a6fe468780b086 50536 qemu-system_7.2+dfsg-7+deb12u15_armhf.deb 7a4b533234b40b546cf767dbdf555eb799584fede7b4fdc9037c43f47660eb2e 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_armhf.deb 89d9c0f2b6d54ddfbd52bf9c3cca9bd2a12a796589ca031f2137d69627d2efdd 127006008 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 2b755474980f8a797af4d74499fcf7ac87861700c2cc5572d8650c40f3a3db1d 125690128 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb dd2e73cdebd373e40818d0139b72e32cebd139c5624b0f322712836098ce0fe4 20581896 qemu-user-static_7.2+dfsg-7+deb12u15_armhf.deb 67ec766675fc2a313f8323e8149ca25b3d536cd55b773199a1cd82eba8fdd758 9322452 qemu-user_7.2+dfsg-7+deb12u15_armhf.deb a1db315922a5f0e8112059768eb1a518f7ed7a7f2f8b44d610d0b7cc87a472e3 7292988 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 0ca0d479387be0d4d4979fc5a598e3d5d962e7bcb1089a30d59d716641026a3a 1129996 qemu-utils_7.2+dfsg-7+deb12u15_armhf.deb fdd2da943925e4a5f61e8cbd7c512b8fc6ad8a20cfdc85bd960d2f132dbe5bf4 29699 qemu_7.2+dfsg-7+deb12u15_armhf-buildd.buildinfo Files: 6a1daf302d2df148d74a2afbff977d59 208572 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb de1c8a57f6a1b9733448cead4c410460 98984 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_armhf.deb 293c9ae2de4f5a93546d0a6bf8c7cfa9 971724 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb e2046afe78fe706c2ce9a455cfe84153 309868 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_armhf.deb 12b87150087b2d909fd618934af5bcbc 36344268 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 8bdc7a62361eff3419fd6146daeb2fea 7978568 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_armhf.deb d34cec6a7285e54a32c07d32bb249f3e 6893768 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 1ec16c400e6db41d5a512dbf433c77b6 1965408 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_armhf.deb 565241f8a9840c11e7bb8171c7d46211 1040260 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb fba8132cd8540dfbe2ec3c8785cd5807 283304 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_armhf.deb 80663a9cd6d442716c9c175f32f10986 48663644 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 06e301ecb48f2ad6e22739711464eb95 11733128 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_armhf.deb a30b5abf630414261b6a949f07d77189 170290392 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 9fb1ad08cceb11f5655f6563214dffc9 29195648 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_armhf.deb e8abb9d8d00c5d79790cd358498b2853 28355096 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 852d52774631dfa4f629612074d36bcc 6633308 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_armhf.deb f7c95ec4204dcdf638ecdeddacadf4ad 18734780 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb cd6acdf25a41c3bf75f443233b3d1129 3445036 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_armhf.deb 64ddd6f4261365f951b74cf7963bd77e 25819508 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 29e2b67c7a0ae9097f7edd18b5dea8bb 6276112 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_armhf.deb 33e582e22c2a53bf5ea1c0c987388273 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_armhf.deb 4dd2e15e9f54ffe6f97bf150f56ad64a 5392 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_armhf.deb 81b22ca880bfd882de6faa045a8b295d 127006008 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 9722a22b505f4f7773e9c7016c9c6ca3 125690128 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb 044f54013eb78b526320c9a9c1be226a 20581896 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_armhf.deb 467c4173d64e15d60c7892953c149fc3 9322452 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_armhf.deb d17aa8870c3870d329aa013e9787cf5a 7292988 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_armhf.deb d25ce64c4adf3c6e31eb6888c4c2200d 1129996 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_armhf.deb 013b303b5f63f782dcb82e468dda901f 29699 otherosfs optional qemu_7.2+dfsg-7+deb12u15_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmifpg4ACgkQlST9Us03 ywv8ZxAAjwzB/Mt+z7U7JmZL/RUIg244cksSqwksrbBLXrYkEc95FiUAFIa1Fjsx o0WMVznw0MnFwoZT/NQ+d6R5kmbnKCzRTm0VrW4gm1wAeFb65+8rcbJ62U1e+E3y 0xerWTSAGdCTWGx24OCcaGkqyX5WWPlNB6WT23HbFdAF3fI0jRmmuwIBddVfupks I25cHFrGkD1HGEyK6izQ4bxcxYyuX/LIwBUJ4hAlPGmi4p2MO6+KO4etIJlbdvrN jRSE8Z1eoI458BsNxiLsQPQU7fR9osP9ex6o6AokiTgex2c8Nm6DMChZCB+I7J0p uAh42Tf0BX/BH0BqxTxr14HKjBu9FaGYL9LgHxFN13LAQtsgLIr3Rg1cwjlVlXzX RCQ8nqC5U0IJjuQjGz4rDJYEmV6QnrIAd3h0kArs7bo/CCfOXUJ1/IumARca4X+5 nsLl8Z4RcNA2cR3UmNeUD7z4BFNVWcNIDbY6NwnQRYm7TAC60o3LyCVv+mC8w7lM S5uKgJQQBmoVHbVtynzR+2UaqNLJsHgn1dFNx7lpTVbpVV3tM1eMI63jBry0gqBx /PeHUxPz44wVB+br3lI0HDZxPxUxVTW/mB3OAeB5/zhzcwHGclYrDsGd0fA71U1F v2IniKJCle5LPfAu+64nzBZcAdR2PWvPoej2f2rCqQHe9lhYprc= =tdpd -----END PGP SIGNATURE-----