-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: s390x Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 87c3a936ec5dbc74e8066e31b7938bc5b5b08777 208512 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 69f94a893a2fbbc09b8ece731b3d162516d82256 99188 qemu-block-extra_7.2+dfsg-7+deb12u15_s390x.deb 9bce1715dd111cadd815d2d73cf596b315f4eead 978168 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb a369bff22e799a46d8dd0a67ee4629e1711f9d01 321728 qemu-guest-agent_7.2+dfsg-7+deb12u15_s390x.deb 69904aa83b2d6a8e9691c7ace68740c24b829b6c 36469948 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 19c489e2d739d70b5a9b6649623c8a674b927f65 8033032 qemu-system-arm_7.2+dfsg-7+deb12u15_s390x.deb 79cbeb89e03e6f59d241227d5513699cccd21946 6735996 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb c39bffc7941abef97a41c9254194476d91c68408 1999600 qemu-system-common_7.2+dfsg-7+deb12u15_s390x.deb a3e5f66ea2665b4286eb5dd05e98d4a4efc51d06 1047292 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 27e7dded66316a24c4739b8e9564c99e7f54181a 293584 qemu-system-gui_7.2+dfsg-7+deb12u15_s390x.deb 68614595423a286e487922f25b7f2ce20a656f90 49135136 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 27a802594f1e47d92822680d5d691abf1ec24664 11931744 qemu-system-mips_7.2+dfsg-7+deb12u15_s390x.deb 57546148f055a5ce9997569e1ad7e81cd0b6dd1a 170859404 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb e3038e9c73d7748cb9f49a5a9c8b26441522165e 42500112 qemu-system-misc_7.2+dfsg-7+deb12u15_s390x.deb 6f79883c40434f639cab390a50de8cd55236646e 28391044 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb c583f83733a54b97e400a4e3a2e5cf9aaa728a2d 6719596 qemu-system-ppc_7.2+dfsg-7+deb12u15_s390x.deb f0d2d1e162695ba04a7640999e6546471e9066b1 18701344 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb fbab1a45a508eec52a7675342625feaf97f13c4b 4687068 qemu-system-sparc_7.2+dfsg-7+deb12u15_s390x.deb 17a971a94774725bebd7a1144eb6f476dfd2c349 26057216 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 57a670e35227ee64d97efc0e56ef699c53ba38d9 6407176 qemu-system-x86_7.2+dfsg-7+deb12u15_s390x.deb 86bfc8836ded79e3dcefe1231100b967bbd65b06 50536 qemu-system_7.2+dfsg-7+deb12u15_s390x.deb 9aa385384dc6c0da076c1b656e3ced6b1e3e21b9 5472 qemu-user-binfmt_7.2+dfsg-7+deb12u15_s390x.deb ca981624fe28c9163b14b9eb22842f3a8415f7e4 126861548 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 955bb6e5e60a47d37000ae4bba3188104f6d7348 124468332 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 0c9507f240676625f10ae8e42c002ecdcf8bc9d9 56912472 qemu-user-static_7.2+dfsg-7+deb12u15_s390x.deb a330551bd6a27e32c3db26a84c9b749d15733308 11904500 qemu-user_7.2+dfsg-7+deb12u15_s390x.deb 35774ff5d8167e7b01f8836a967cd204f8e6bd9c 7361800 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 9f8542314627ac437392e35661a9ba9588f15e94 1177360 qemu-utils_7.2+dfsg-7+deb12u15_s390x.deb 1a14541935667e76a535087eefba871f20ce0a8d 29218 qemu_7.2+dfsg-7+deb12u15_s390x-buildd.buildinfo Checksums-Sha256: 5297197ef5a577f1ef24ca7350fde86e73423b7fc2fb7ecc5d4eafb58bc7d2cf 208512 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 76195e4d307161620064fc465a4d07d14886cf4960b6a79e594b7e5fecd15c3b 99188 qemu-block-extra_7.2+dfsg-7+deb12u15_s390x.deb 008133d0b8f7a139f65f7e65caf41d3c333947735f667cde340023a93b52a2d2 978168 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 4d73df25307d4e0517b7e622f58229ee0ec54681da860514c39020fa817996dd 321728 qemu-guest-agent_7.2+dfsg-7+deb12u15_s390x.deb 0bce4ea7263e4635d15c652d6023bf1aad6c8126c5605caf84d7a05ddbd9fe44 36469948 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 76b82d094408d10c317a79239e012acaa21957a074d5fd91b03ec7ba558f6a3f 8033032 qemu-system-arm_7.2+dfsg-7+deb12u15_s390x.deb b6b143c275472f874980dc22aa812154ec0cbce2f653cbfb93abb52e0695ee2d 6735996 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb a4b4be0bcae10a89824b7f67533fd6359a9ea1196205ce0ac581d59ab7edfcb9 1999600 qemu-system-common_7.2+dfsg-7+deb12u15_s390x.deb 55fd65ccc8dead278d87bb538c3c7a378bca932bb8e85336075f98f6d0d847cf 1047292 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 43b3d03f67dddb7002d7cd9abf30104a405fb41b0f8077393e5abba42e41ad4e 293584 qemu-system-gui_7.2+dfsg-7+deb12u15_s390x.deb 10fcf409a1c7b6ee1e591c6a735aceaec1ec445bc6376084d594b59fb91e9054 49135136 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 3d87b152ccf63c618bfbacfe748ce6cf5a48fd5bea2c3fe1aabcf8748cc0913c 11931744 qemu-system-mips_7.2+dfsg-7+deb12u15_s390x.deb 42bded79f85293bd3bb22d8f4f16d56141423f1966853847086f6b49726a7ca5 170859404 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb f443c0bae5b0a5de16ec63bc69cc9229d80b5b3c104941a48c148b353ed84c68 42500112 qemu-system-misc_7.2+dfsg-7+deb12u15_s390x.deb 787931cea4fd953fc3724ab2ab65307a91a734232616e5073ef4099754a4dd5a 28391044 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 4e89dd0082b941c9e1457912ed91dd3bfa941489921695ea0d68c24de454c78f 6719596 qemu-system-ppc_7.2+dfsg-7+deb12u15_s390x.deb b40f81de7aac77a26a956058f685c2bb058dbf4759afc82762a4d8f4c5c7f0f1 18701344 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 8d1a7a9c6c7f7b24f9cfe7485a25074a2beae4a3788726e38058c54f01904b39 4687068 qemu-system-sparc_7.2+dfsg-7+deb12u15_s390x.deb 810465ce1077cea7259d1c538774b14af94111503edc3a903e4c55c7a78e0f1a 26057216 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb c290682086455d3db2cfb0e2dc2a9b397344435ff5c83e07e760f010c04db183 6407176 qemu-system-x86_7.2+dfsg-7+deb12u15_s390x.deb dcb27548950a29c9a7f360e28e0d57f23e228c3e3c39eb9e6cd08c14b770c5d3 50536 qemu-system_7.2+dfsg-7+deb12u15_s390x.deb e26b64162f2c900ce1cf080b98c07c29cce73321218bea4ffdcdebdfe2ded2cf 5472 qemu-user-binfmt_7.2+dfsg-7+deb12u15_s390x.deb ff01166211486eea53f1c153330441984b42d8f8d29d45a83c7efc2b0b43addb 126861548 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 6504edfccdb389f09ede8e8a03ee62fdadd88429907adca5350469806e46a27c 124468332 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 42f4be31f6755aac300edf4d167a61848733af6e4db7d78e8de5c1035bcd85da 56912472 qemu-user-static_7.2+dfsg-7+deb12u15_s390x.deb be56e5be0c984f092458ff8652624d1b45ac065697a29294da57e000fcce5d66 11904500 qemu-user_7.2+dfsg-7+deb12u15_s390x.deb 3d065d0a300dcccab10ec67455d1d2c0e155f547640c71548fcf9b1b8ee495a9 7361800 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb aed315a30008105837af8431db3a453676094f85e05c6be00490d55cf76efeed 1177360 qemu-utils_7.2+dfsg-7+deb12u15_s390x.deb d821dfdd1d9fb4e1f486ef8439c399a77ba23f6b256361a83019b72835cdecf0 29218 qemu_7.2+dfsg-7+deb12u15_s390x-buildd.buildinfo Files: f12fc27065ee3620c7746db142d9266f 208512 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb a7f8a334fa44de13d26745832735de51 99188 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_s390x.deb 14b89cfa66853084a32c724d78444455 978168 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 13bfaccdbd9efe8031bb6df2ed3114a1 321728 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_s390x.deb 3550cb9e8fcf7e70b2ffdf04974fa3ed 36469948 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 499e1189ec33ff1355a7ae4fae36630b 8033032 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_s390x.deb 52c58c73b8ea8e56f6a0e82019d82270 6735996 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb fb4dd16c099d65ce175be8ba1351ccf8 1999600 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_s390x.deb 83262a79fdedb0c0d3b2aa11da17cde8 1047292 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 44e78d729bea21687333164d991fdc9c 293584 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_s390x.deb a1e7d17f5adb11ef989a051eb7788952 49135136 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb ef3ad9e2e60f09f8281a2abc4388ffa3 11931744 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_s390x.deb 87b653cd21c207c95dc1f4215b30e7e6 170859404 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb a9ccc32f717662daa7f61b4d89a44a6f 42500112 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_s390x.deb c6e2f87604b7baa3a503fc48fc642cb1 28391044 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 3247025f07e60de787c1771dc9f4830d 6719596 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_s390x.deb 6bc427b6845b855d16e1490ed09daa2d 18701344 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 3e96111d6a261ef938192bbe467017b1 4687068 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_s390x.deb ff6354045a60dea8c6af5a07b1fb44df 26057216 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 25bd5fb4be1175185b4822f6e3113cfc 6407176 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_s390x.deb 6f3fc9258a70e49dd0e1ad8cabbe26b0 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_s390x.deb e6827ed3bd9a54d6b6b8d3d12508e863 5472 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_s390x.deb 5557518e4ad91bacc40eebe0a064b7c0 126861548 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 0b5098fcabd805c00ae087e63e7bbe49 124468332 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 829192171fbabbd9d5a560892a607dbd 56912472 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_s390x.deb ed035aa49dc63f2863d5ce6a62d74c1d 11904500 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_s390x.deb 753addb4ec31b93b9c8b420b8727124b 7361800 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_s390x.deb 7fb39884078b805ad2effadea92db6a9 1177360 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_s390x.deb 0647cacf7c692b2559e0a934c478286d 29218 otherosfs optional qemu_7.2+dfsg-7+deb12u15_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmifrkoACgkQAKOyQzsW VavR5xAAoq9YxThk8rLRp1ZbMVmF5Jg+Y3Su3o4qIPmX4lC4c7bIH0zyFYHak/uO ZE6lhYpOtk9EYf4wyQvVGUfAH8Rtvvp22JH7aC7z0xfPJpAMr7e7FMI6vBDWSroL 3Wfkq0DRECYSpFvPdD+yHToXOQuJfnrQX4FPuutUU4/D//+7nRXvAxZ8uFUz+pAL qxl0JMuoOY53WWXwCMDm7fh2Jo/vxNz84xP9eUjHOcTjonz5IElTvvmxQu21Wqaf OMUJESj2FQPeaAgjqViNmmIRsBPJPDZreCv2m5RyX/tpjrObhKaxvKCwILuUhX8q t7/x2N+bWISI5hJn9KyJQ7hwAhj1Z0zmU952R9lAFzQ1JgewSeswm5YSl3IBAJoc OSuxKkniN15uPRuLW0K7LsbwPDSaKFJAGQO4YWviZ2JOjTzkcbBIdT0wo8rjgDt5 NoohJ8xrTSLnsyNNqHcgG7Yd7XUP7H3LAVs/ok3wqmv/ls0jWTMSijbVns7KN3BZ MQSXQhkgb/CmboX1y0dQSkYm/cVMp++17PoJHiEhkk10Hgb4zAcEWC34Vavu7TQL n/cQsyT+QaZatkgdgVn0QQ9dpktaWSQXmo+KGb+nAVDbSiUAWmHFTa6u0cvN15QA mg6Y5qVWEdT93JGX4fg+ESpDxE+Kk8qLwfn/gCro/tFlSS9B6mE= =jf4N -----END PGP SIGNATURE-----