-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-system-xen qemu-system-xen-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: amd64 Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-system-xen - QEMU full system emulation (Xen helper package) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 60d7dd52ce67db4f775995a575c3771c73065955 292840 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 876f1b0bfac1f2213b0ba0707ba0ace130992123 105800 qemu-block-extra_7.2+dfsg-7+deb12u15_amd64.deb 4c603b75d23b92818d579e3a55e92158322f9390 950076 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 08dccbf3ae456147fdf3a3d233c1078bc18edfbe 343344 qemu-guest-agent_7.2+dfsg-7+deb12u15_amd64.deb bf3034ab0bc8c997ca2e97dcdbb79d8504928de3 39985144 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 01c0efaaea1a5286c4dfdc03a7d45c1ba967bc9c 8907364 qemu-system-arm_7.2+dfsg-7+deb12u15_amd64.deb 423826926b60b7b7c0aa08c28f3a3138366c9d10 7515540 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 2a660894fe8622598b742eb4c3809279c354de49 2184668 qemu-system-common_7.2+dfsg-7+deb12u15_amd64.deb c5ac722d900e1088114c6d2e32760204befad293 1042132 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb a55126d104957dddefc4fff51156b19dc7d5801f 317220 qemu-system-gui_7.2+dfsg-7+deb12u15_amd64.deb 198c5db4b9c05f2b32f9a376911594cd23c34e5c 55396428 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb d5b2c30e4897f6edc758ac527475abcb2c0da232 13265984 qemu-system-mips_7.2+dfsg-7+deb12u15_amd64.deb c1c2380befadc12426b8b2a98b00547997d78207 194053716 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 6a2846abdf580825766934e9fab0bfa7cea0012d 46116260 qemu-system-misc_7.2+dfsg-7+deb12u15_amd64.deb ccc3d655a392f63269c8eca9abcf35386166bea3 31504680 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 7d880f212395c0958a39663526c553a547910c04 7485596 qemu-system-ppc_7.2+dfsg-7+deb12u15_amd64.deb aca94fa29cf068269510a8f57f53f171dfbbffd5 20480500 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb b85e9f1312aa088e6b4b6f9d7fb1f18eac655148 5186220 qemu-system-sparc_7.2+dfsg-7+deb12u15_amd64.deb 0fba07d8aa49ed2f22edbaee86d4cfa5d4a0315b 37428484 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb f863f2310fb60f54cb90a89189f894147dda168a 9247148 qemu-system-x86_7.2+dfsg-7+deb12u15_amd64.deb 50d48cd9389df1cbfd422dc9eff0d8dc6127450f 11042204 qemu-system-xen-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 2b9ffd13d1e1cc96f02185eaa251fec19d20e714 2756544 qemu-system-xen_7.2+dfsg-7+deb12u15_amd64.deb c75c55c4055b7df3ef75817f522cf78118e796f3 50536 qemu-system_7.2+dfsg-7+deb12u15_amd64.deb 00b4b8b2585b66e0b5603849b0c1cefe98c08ef4 5348 qemu-user-binfmt_7.2+dfsg-7+deb12u15_amd64.deb a2ffaf163de550bdf380f561e2414a858528a346 135605664 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 7921f935ec137db126a4af33d16671947d54db5c 132296444 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 3694fafc04879dc4488e787eb96ad9f9f0dbdaa5 62622984 qemu-user-static_7.2+dfsg-7+deb12u15_amd64.deb 31ae376dcd0e85b70c70ba0cfdabf2e857840b98 12264416 qemu-user_7.2+dfsg-7+deb12u15_amd64.deb 97fccdaa27675960ec8b7f85ce6eeb9b7da30427 8259332 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 82743fe798c42fa7e8c463812661b8b2ea181378 1288196 qemu-utils_7.2+dfsg-7+deb12u15_amd64.deb feb1da15c24de01d9dc20f6c06c5581722cd1652 31182 qemu_7.2+dfsg-7+deb12u15_amd64-buildd.buildinfo Checksums-Sha256: 276895a05acb711665da587e711983005be9c464f6c6765a1da1663b5e1c019a 292840 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 5c10abe7c46f3498cfc5c58b0923c5be5f5671ec27f67c3af3e8b901a1ed3231 105800 qemu-block-extra_7.2+dfsg-7+deb12u15_amd64.deb dcc8e14d89aeb5d52ec5193b5f911ba6d7ca2ad9811bad85ca4b1c5e20863e73 950076 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 426e6dbcf8a1f6c63dc624c1a263c464b0fa8bee20cafb9f6f0f363919e6867e 343344 qemu-guest-agent_7.2+dfsg-7+deb12u15_amd64.deb 0c0e4fb11aca46e8c4da66fc2ec5e4b9fa23f819e889e4027e7f5798f34955c6 39985144 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 6b546fb52396bf03f40d143114566c91fa2c005566ea5c15d9cbcc4286599da3 8907364 qemu-system-arm_7.2+dfsg-7+deb12u15_amd64.deb 19e23c606359275a2d3c933c444d0f0c85dfc146048ac8793a75da9c7880e1c2 7515540 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 6e43900114f211e492c467b219999c6c2e2c53a1df386bc8f4749c48a2936843 2184668 qemu-system-common_7.2+dfsg-7+deb12u15_amd64.deb f27f1a50748f6298a4ab782582a663897dbe43321b1dc1e2ec0ffa753dc29f85 1042132 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 91e1babfe923810537d657830d5e5d099e2cdad1affecc9a1468892efc4a51f3 317220 qemu-system-gui_7.2+dfsg-7+deb12u15_amd64.deb f1670aca6f70dd2cae4e0310863fb4237a311e02e533aec602d37e6b8300b102 55396428 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 4be094dbf4a493e17ab11bc61a9eaad6af56d3fe3ebdb2251c742aea5df4eae9 13265984 qemu-system-mips_7.2+dfsg-7+deb12u15_amd64.deb b49e034e8cfd800c87af99dc2764f76c7264215265d88a7966d0105f76a38fb8 194053716 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb a85b8b807a0e6e1276e762143dfabf8306b9bff34a2e8347e29b8dd0b149b2ba 46116260 qemu-system-misc_7.2+dfsg-7+deb12u15_amd64.deb 48824efcc075d42e25ee4a14422d73bc4cab7ade8ab2a8079e2ed69f5d10df50 31504680 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 9cfa9a7ce8de3f738b1e98bca59584d54b9197cc8441a194c9654bd322fd8674 7485596 qemu-system-ppc_7.2+dfsg-7+deb12u15_amd64.deb 1e2c5b8806e9de0169cc4313ba8cb7d7dc21910170a4de24b7989fa898d1fa55 20480500 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb b33ad7060109fd9c79f8ec438162a8fa33ea881364925d73ca91ff1e3cae8e45 5186220 qemu-system-sparc_7.2+dfsg-7+deb12u15_amd64.deb 3a7a74f9e2993e32f861c64b9b9627763f5c556ebf4f3514ea87689a9805a211 37428484 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 532d45dc141a65c7fd9031e8d916059fc82848888ccf46a738d3e89ef8e689fd 9247148 qemu-system-x86_7.2+dfsg-7+deb12u15_amd64.deb 621471a4c6875648bc580bcff76a0ea33e00aa1ed9a16b5bc36bc160841b900f 11042204 qemu-system-xen-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb f28a27b1fb16b28195f61d3f8dc0f09abb67753ea683a4b225106a403df286c3 2756544 qemu-system-xen_7.2+dfsg-7+deb12u15_amd64.deb 2408e07e32401001b519b84aec5a2dad61e1f6a727232156ebbc2dc819bc690b 50536 qemu-system_7.2+dfsg-7+deb12u15_amd64.deb 42b63a590133634bc6adfe9ea2dc7b3110285e19433b57ab0dc99d90213550b1 5348 qemu-user-binfmt_7.2+dfsg-7+deb12u15_amd64.deb dcc1a21db1e355b729c152b6a6da72c88b2f10528a40a4e4726a18aeb08d960d 135605664 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb f3ddbdffc084960719bb6a2d91a55a632e8d05fcc8aeb2df1807ef6b12d6d0e7 132296444 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 073b3bc6081c82177c37f045ab7954c998f7d7a70ca57dcfbc308bdc83dc4018 62622984 qemu-user-static_7.2+dfsg-7+deb12u15_amd64.deb 2076c1ec290219aa2a8d96ffa3d6407d6b258794dd4c6498663c2bfb2579e1c5 12264416 qemu-user_7.2+dfsg-7+deb12u15_amd64.deb d1ddf8299f3829a53b28f9f678c8eef14099b705784702331a7949384f591f71 8259332 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 763ab931ad2f05d9d6152e44e6c4c8acf37819155b09eb0c21275252c6c22264 1288196 qemu-utils_7.2+dfsg-7+deb12u15_amd64.deb 659425ea20403a9b4212477880a6774675a806af3c412f5eea205eaca2fb1a33 31182 qemu_7.2+dfsg-7+deb12u15_amd64-buildd.buildinfo Files: d3c9792ebfaf60fbe102c7a59cdaa74b 292840 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 01d83153e9935a0e7c802297dec8b8fd 105800 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_amd64.deb 18683b61b6acb9a0e6fb49031db1815d 950076 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 173f2e8d22854ace80fcdd92e7529541 343344 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_amd64.deb 46192cfa07cb77b62e030dae6e3e8c09 39985144 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 0432b3783a7590600a4b9e31dbf311eb 8907364 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_amd64.deb e0fd4ef7a86e7d5d6944b5ee3851ee74 7515540 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 7b7961f6ace78a92433f376e79e5e879 2184668 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_amd64.deb 4c50b7d5d14f6e6b625c675310b7801c 1042132 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb bec1be5c433da2bda8e08185df5954ff 317220 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_amd64.deb f59531518346afc3c844efa9b321eb7b 55396428 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 85f6eb9660fba9eba2b9b7acc3b3d74a 13265984 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_amd64.deb 6a9ffdd4ecabea2c1cdb7ae3ce0c9025 194053716 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 83698a3cf929002cc4a23940ba30f702 46116260 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_amd64.deb 2e7e27c55737e9d32bd5e13348697f3c 31504680 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 0eb3bcd8777ad92a11c8b09c4e45004b 7485596 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_amd64.deb d8bd48061f7d5a4cdda4d8328182576a 20480500 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 26fa66d946ec8b0b9d6b9bff5ec799ed 5186220 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_amd64.deb da1aa02e9c2123bf68164ad6e60bdfc9 37428484 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 257aef3d24677d3add0c70881c68d80e 9247148 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_amd64.deb 49f08a3c52c7800bfdcfc86f3187bc12 11042204 debug optional qemu-system-xen-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb 3e052aa9440c2b82ff3a33aed80131a3 2756544 otherosfs optional qemu-system-xen_7.2+dfsg-7+deb12u15_amd64.deb 023bc51910e9140f2cf30a0bdcfd1dc8 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_amd64.deb 02e5662bd2606dc457efa34c2b34141d 5348 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_amd64.deb 957440524bf902458610168027d24d59 135605664 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb f0b6dd2f7bc472706045e9518319b506 132296444 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb ddaa5bc7d94ec0dfad236cc289e6c25b 62622984 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_amd64.deb ffbfbe78b0f635046fdb78d8435a2fcc 12264416 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_amd64.deb 788a2c1a7b26cf18f119dda779a0b63b 8259332 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_amd64.deb e6da7f4d6ce6fa5d8e0e44a2e197c295 1288196 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_amd64.deb e8d974bc93ac82dbd6f0edd31f2204c8 31182 otherosfs optional qemu_7.2+dfsg-7+deb12u15_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmifpxEACgkQIy3Pg040 HrAd8A/8C599ISPcuU5FGi3NkCGuAX77tGf/fHxhZsXqZCn5CcS0MhHs4+m/Mqwk JzrLsJ6p1WZiVwylzSj4v+nVJ1SF3XDrRxnrDmKdnkuvPGMjnFeqjHeR6E+Yg6Ra aS9TXQaWsQgy2ACTeb0pxOwSFWk0ALNKWSSKVPifWG6Nhp8lwmUHVlcpxXnMq9+h PyEADwpD44E2IP7aq8e1nGuc63eapHPNQnIoxx53veALdS/lfiqOgeA7SfwQVi/R 37Gh0Zxx4pb/JfCNLNmRrPNIfsi8tMb+4ON6Ces8ki99TtYi8TEjRjN84J0db+SH RSmBUd6U+MHuaxMxKysF81/ONvKEklfJ0glzbYtLb/+9jS8tRLICArIHuUY1Rc/F kVTofG/prpQ7+2tfZSjwNxb1V8IzgpWd1fsu6Hr//yZeAg8nzVoyO3+wgtxBKmqC BldaB2M5AchgfEx50q9GKMIMuKqZvZFG4H7NQ6rf5QxRx2z44cd3JSynT2YwCThH y6QcIMLRjZ+7y3gwv1DFxxaLHjMUn9eEFumolFGm1wTS/Ho/3iPJMgfRRce/BN6L DdAeuFx5yVxIMZa//h9XdcHoQfFq8YgqAdgRfoZM8JZf/u4be53tcNoDQVuNeshT OSF8C9yELgmL2Frplz6EzXYg/ribpOzYb7l01/TMNJzBvCl1rJ8= =XkmU -----END PGP SIGNATURE-----