-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: mipsel Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 392cd09b144eb0ad3634843353883c68e89469cd 215588 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 487f820033c352de2017a9baea7e22e055dc753b 103324 qemu-block-extra_7.2+dfsg-7+deb12u15_mipsel.deb 02d65fb31f8f0b4470d169ead280014af18e2ba7 1039708 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 48707071d065516c064fe576352626905a2a7bee 305840 qemu-guest-agent_7.2+dfsg-7+deb12u15_mipsel.deb 20d3e74eb5ca6c215882238b3f039c8c36fcb0f2 38393596 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 45424731cb056ae9525c60dd0e87d3356f18f1ab 7692140 qemu-system-arm_7.2+dfsg-7+deb12u15_mipsel.deb ef99dc4af0fb1eccaf6027f013a5c0a48563b33e 7264004 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb c73fee94dc20e4a7f5a56595a4fba94cbbb98bb4 1984800 qemu-system-common_7.2+dfsg-7+deb12u15_mipsel.deb f9f8f1bbd518027f894b24bab9c7255b209614df 1102904 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 04e200b10699f3217f9a13756924b783331126ab 286308 qemu-system-gui_7.2+dfsg-7+deb12u15_mipsel.deb 0163baa2ebd3d98bfdc90006f0ab5b3c92a8eaac 51036180 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb f1201f0b240e198cc76edfcd05fe7c3ace18bf18 11434328 qemu-system-mips_7.2+dfsg-7+deb12u15_mipsel.deb a44e713d9f9bb243c6c898fadf922ea7c2bda756 182403976 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb d4e59fb6a019661e7bae641f83e7a247141be6c0 39698056 qemu-system-misc_7.2+dfsg-7+deb12u15_mipsel.deb 8bcf726f1b0de7311481dd947d7ef346e3fdb2cf 29895744 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb f74fe0225d92ec3804cb8413cb22244bcef79131 6418948 qemu-system-ppc_7.2+dfsg-7+deb12u15_mipsel.deb ef6f371853e9f078d116c6cba113bcc9d4d65904 19884776 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb ec2f12c1c5546441622ca4ff625c07e66cbdaf4c 4500200 qemu-system-sparc_7.2+dfsg-7+deb12u15_mipsel.deb 8b4a6049efeae261b887f32963380e9452ad2dda 27173112 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 129f2f8cce55820f0a1574f8f436e15cdfa015bf 6116384 qemu-system-x86_7.2+dfsg-7+deb12u15_mipsel.deb f4ed54e7f3b351a68a40b8afb7584827786d8115 50536 qemu-system_7.2+dfsg-7+deb12u15_mipsel.deb c236f12ec0e74d89be1f1527b4be9c0bc4445e80 5492 qemu-user-binfmt_7.2+dfsg-7+deb12u15_mipsel.deb b1cf3fb5b4ad6f8d6fb22ba89537081297331da3 140344804 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b4110ef20fcd61f73532ceeeebbab54696d93177 138300404 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 411d0a86d3ea50ed49c6e98e850774cc0e959744 47969864 qemu-user-static_7.2+dfsg-7+deb12u15_mipsel.deb 6396b5c7b26df350081b63f2ee9115ae00b71f13 12162440 qemu-user_7.2+dfsg-7+deb12u15_mipsel.deb 497c147a4a217672fdc7239c42589feae040559e 7699272 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 6d87ce8b901740ea706dd44dc95c9c885ded2ad5 1175812 qemu-utils_7.2+dfsg-7+deb12u15_mipsel.deb 1e28bd5d5ea4bda8fc1bdaad9f75e671af6f4bcf 29604 qemu_7.2+dfsg-7+deb12u15_mipsel-buildd.buildinfo Checksums-Sha256: c059f2749d64e65f6adcbde1f4ec86753260c99033d8c92680f8b049446a15f9 215588 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b0fba6c93a25ea357a0a00d0dc72de26968827fc94cd77ba074100935d65bb03 103324 qemu-block-extra_7.2+dfsg-7+deb12u15_mipsel.deb 4b5393861259a3476fd79a23dbdca119bca8b78ad6181d3185613fc976d7337d 1039708 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b3f0fe2db25c1be36b663a43a5da349abcfa7e46586f8ea13a014de029307b2d 305840 qemu-guest-agent_7.2+dfsg-7+deb12u15_mipsel.deb e6d7119ae5729e15a0fb83aa0d18d928fe8925ab782fdddefc29ce543d0341b1 38393596 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 17d7136f5602420185132d32f7a6a7751cd46b2e5bb6dde830d99f2e5b8e9bee 7692140 qemu-system-arm_7.2+dfsg-7+deb12u15_mipsel.deb db8110f8128f9c18bbf7ce73dcb3296c8fcca4889d95cc080d69bae88a4a8dd1 7264004 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 8001bb5460f1ed773361e63ae84f44c697b32e6227150095b6811ac9c1d8dc35 1984800 qemu-system-common_7.2+dfsg-7+deb12u15_mipsel.deb 7c066a19b5b66f342cb1daa8d3961fc023a078c0ef2a908683eec734ccc71f01 1102904 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 2a63de445923064693376262c76eac2cdb7324f126af214fa959e8ab4c61e9b0 286308 qemu-system-gui_7.2+dfsg-7+deb12u15_mipsel.deb 931442bc37351a8cac70820bda8ec59b91759cd724ec9efc5ebd21ae2bd02bb7 51036180 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 427ab0ae26d28a35ed3d64cdd1b309f90dc523a406e34cbfb755575deb7e6107 11434328 qemu-system-mips_7.2+dfsg-7+deb12u15_mipsel.deb 53e452410b88feec65553e402e4777dec9cd2de047aabfabe2bc32125c3778e2 182403976 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb c0319005d086b91e292811936bb526661193da6d64fa0b48a7eaa2bde5714f02 39698056 qemu-system-misc_7.2+dfsg-7+deb12u15_mipsel.deb 9d43e31e812141530d8eda1af7134f4f8793250d8733acac4ea6cbb7bf1a7092 29895744 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb dc947d64c0b201d4ee336aca0fd3b031902e3806413b2d4fcce84c800c4a852f 6418948 qemu-system-ppc_7.2+dfsg-7+deb12u15_mipsel.deb 6f948f0867b6e9c6989ffd6121088faed5422749322c59f70e5fa64716c8f8c3 19884776 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 8c2e6cc6002cad23c55556c2627dfaa30a5c8509ff98bb14c8d43212b0e78712 4500200 qemu-system-sparc_7.2+dfsg-7+deb12u15_mipsel.deb 7e2467637b7f1de10d3e366dab15ca9a4990a618151191487dcd1ebd5ea0b799 27173112 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 4eb61141f6c373bb77249e2590f175200557dc100a539741771ea28afed0c917 6116384 qemu-system-x86_7.2+dfsg-7+deb12u15_mipsel.deb 47219f65b89a45f46d7702820a8a43a4e45136cb3740c653a3e8a45f32fcb773 50536 qemu-system_7.2+dfsg-7+deb12u15_mipsel.deb 291ac4df160b668081c3b56281c9a016da6a191c730e933a222aa051418e0cdc 5492 qemu-user-binfmt_7.2+dfsg-7+deb12u15_mipsel.deb 5a34570aaeab35e59c273ddd322564e6d6c231271dcfb174ef8b52485297fe41 140344804 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 52eb5755f3b6a5c2e930c1db48fb7d812a9d1c5959cd3b8691cfd299120f1c51 138300404 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b98ff4b2c48c437b2cdbb72c0bba35b38d1130c42d0f8e4fe9d0cacbd7d58593 47969864 qemu-user-static_7.2+dfsg-7+deb12u15_mipsel.deb a7fa1594c233af7db036e948cd1b54c6c5b8a0da2db548d79b200878ea772810 12162440 qemu-user_7.2+dfsg-7+deb12u15_mipsel.deb 3e85dcf8bc47c4573fe23bbab59e53e7504ba7824800a8f54ebfc22360fb440b 7699272 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 7d55394c0c3fb829307c824cd2e8d6915ca8783aff50f1e59ad165c2651c9ef5 1175812 qemu-utils_7.2+dfsg-7+deb12u15_mipsel.deb 626ceff37413add244a1047a675bdd71a92054238f5391902aeb8e27b5d83897 29604 qemu_7.2+dfsg-7+deb12u15_mipsel-buildd.buildinfo Files: 26cf31349f73bf9f4a6d436e4f093bf1 215588 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b3365020b9479b6f635f04210144a6fa 103324 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_mipsel.deb b3e6360ce5a4cd7e754b0c6084d420ab 1039708 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 7bf90bdd5ec690137f8d22a545c51ac8 305840 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_mipsel.deb 842a622221fcf68d903d5775b5167452 38393596 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 17473c991ec2ecb203468890a1da23da 7692140 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_mipsel.deb 6b627141673726cc388168ffeb4e83ed 7264004 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb fdbaa230f36309607a5cca97c1401dde 1984800 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_mipsel.deb 005bf455e0664653a68c49a8c6cfa720 1102904 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 9f7321f8391c52e4406d8069d7994ac0 286308 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_mipsel.deb fa8f8b1376db38c85ff63fc2ecada688 51036180 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 88e561ffd6954a9fc7b6835435f3bac0 11434328 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_mipsel.deb 042064b488fd87f4cef687a96062ea3f 182403976 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 4682b36d50474194f74c5e9561891271 39698056 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_mipsel.deb 8b3935a0618f61d16d489b8de3a05810 29895744 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 20f4795269696ecaaa83579973cf1748 6418948 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_mipsel.deb 1aa46cefc8f98ace8202a45be98b028b 19884776 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 6a1bef58e6d53176166f75c0bd35ffef 4500200 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_mipsel.deb 579ef6644fedcd0584d0a0c53f3396a6 27173112 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 8d4aca4dca1b7f62fb9701c38e854045 6116384 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_mipsel.deb 2ce5526ae68c2f70851e4298e70382d6 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_mipsel.deb 0562bd7476f82902dab757dae5a0cefc 5492 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_mipsel.deb 17cb483259651a047586664f587ddb2f 140344804 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb 3a2550b0d915515104bc9afcd095854c 138300404 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb ea9951e4b77adc2b87d296dd4af5fd95 47969864 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_mipsel.deb 96c181e9e761ae53ea196523d0344596 12162440 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_mipsel.deb 34954a4f364fadcfd91f5a5965d6d4ed 7699272 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_mipsel.deb b083492d96caa34125ac506f35a47e11 1175812 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_mipsel.deb 9025057296216b687da1b80d608028cc 29604 otherosfs optional qemu_7.2+dfsg-7+deb12u15_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmif5H0ACgkQV4aVsMgl zVcGxg/8CDPgFNJrroMgiIkFGpDeocOEMiwWRJAgVnejxPROM3CvWxi5eUhnZNbn zQFNilJ1f8WDtV2bqofd0TJ5CbhAF6eLfyFnuI30MziakTqFvKuYR1+20///IrXU gP8I1lmJDbeOfwnDuBc/XETmD1Pyh9uMBGHuJ/IuYui1EIg42CM82PrB71W5/lqX C+pU6G+rKAxzMatfNXaykggnTKSa3xCePXJNbLe+01m6jL+yzyR//mojIb/N+bdB Hjc9JgRLfdP3Xq/EH5bOroXJuqXgt1FZpTLjO3UnQyZ3xULrSBmV5e7NyFXEnT5Q mkPUQiM4t6ZT7xVLoWN7njG5ikNBoMFiG47S25t/M0rqVIKTzmVGh1V/g1JT287f Gp7YaVCmreTcJaKcUWv3ZHwNyTyZyMv+CWk1n+QmjUdd6I+aJN1SY8T8ouXUlOFT hsodauOvA/60jG7Dq3H5+drIdDYSGrlVx0AZqe1J4lgjk/pqeeBmm2hnVDmiLAv0 3wCz4impt6RDXqikqnRdATSNrRnxz4otBCFooSxSS4H9gmDxC1TJUE72cI3OcOEV hMuw7kCZYtIIEQ74vbt8NrTbrm3sYMTmAEjc9O/5OpaKfwFugvXCIaw3MvdQUKQf 2fJSNPjBwemVP2azXgF+DnG4Rkf1fFKV3iLbFFogLpR3w537IDM= =o4Zb -----END PGP SIGNATURE-----