-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: arm64 Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 53d4b4559471b0e3745b7b87e7b4749444f700a7 289952 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 44ba8b1ab12911e726a47afca5e848515f75bd5d 100652 qemu-block-extra_7.2+dfsg-7+deb12u15_arm64.deb a451a1ff770534ab0ec38bea32e4c157a8f0d272 984124 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb d2be8edac122d27aaeafc6e32942e868d2efa96d 327600 qemu-guest-agent_7.2+dfsg-7+deb12u15_arm64.deb 03e143f5fc5c0ee7e3d826d7804d8754eeea6f06 39433948 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb d164ca218b510199ec5748d2e570c105d543455c 8199320 qemu-system-arm_7.2+dfsg-7+deb12u15_arm64.deb ff0126d77fbe2a7975ba6f531808459a18935a7b 7591716 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 1a7027f87ec953f8b72fce115f262e19dd810d86 2085940 qemu-system-common_7.2+dfsg-7+deb12u15_arm64.deb 1a7dce7bab3413c9c4032c1885c8b6ffeedae798 1066080 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 3d3cffc1278f42708d8a1ee2e6cc9a9b77d963d1 300352 qemu-system-gui_7.2+dfsg-7+deb12u15_arm64.deb ea23e94a45a4ed62fa3c4dc8f7d5db8c9c9a956c 54442652 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb ce15fa9cfde6ee648b52647551b70bcbaf700178 12064636 qemu-system-mips_7.2+dfsg-7+deb12u15_arm64.deb 7a380d0b08193a9c09d0306cd20301ad20bd8f43 191075840 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb af98fef430fdeb1ff078905867fb9cf2b842947f 42884400 qemu-system-misc_7.2+dfsg-7+deb12u15_arm64.deb 385d703b97750383f4cd7601dbacd2c22435cd72 31010564 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 433787e97cd2f11f4d7c11187f373664d79f7b99 6853020 qemu-system-ppc_7.2+dfsg-7+deb12u15_arm64.deb acf380999e4efdf0e5584114baad67e5093a46f3 20205248 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb de787baf07bd030f1807dc11887e242edce9d972 4747424 qemu-system-sparc_7.2+dfsg-7+deb12u15_arm64.deb 02b46c5bc72228b3f9bc8d79f3efb80ef0eb0d1d 28498760 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 1f86fe7c84621927c3158542b682c20601139d1e 6485268 qemu-system-x86_7.2+dfsg-7+deb12u15_arm64.deb f036a27ab27dbd2a0fbef96d1b4b03b8d1b49f8b 50536 qemu-system_7.2+dfsg-7+deb12u15_arm64.deb dcb2bd5f5c2b457797f75ae0603ce208e8a90c97 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_arm64.deb 0762b082301d73ac305608fdfe0027551eac00e2 134624240 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb fa2c02c419bcb7f63f3ffddd6f76bd4a6341adb9 131783164 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 8f5cefcd4ced4fda00159f8c5f4329e8aa12fee8 56387152 qemu-user-static_7.2+dfsg-7+deb12u15_arm64.deb 961baacd480647d259d924ed1447211e12e3876e 11652416 qemu-user_7.2+dfsg-7+deb12u15_arm64.deb 168aeff095e876f5696d2116b51840c1153fb3be 8230600 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb deacc92b76ea5f484bf54a9bb19dcd6f06c0593f 1225608 qemu-utils_7.2+dfsg-7+deb12u15_arm64.deb 054decf288d5b4bd9d81342621af6f44b2590cb8 29944 qemu_7.2+dfsg-7+deb12u15_arm64-buildd.buildinfo Checksums-Sha256: d8ac728e27cf30993b8858561015e095f2d8b8b2f8908a7809df6cbb00f57be3 289952 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 6d00c8a074913019ff3d8b9a00192bebb78102d555ae1d3e80a5691b389a3bc3 100652 qemu-block-extra_7.2+dfsg-7+deb12u15_arm64.deb a3a7e46fe70a1cba678cfb391ad9a75b8ff2fc71ff2d7eb57c9246757cd77721 984124 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 6781f34f590a093de745dd759be5980948acadd769be595281b93c69e3c3a81e 327600 qemu-guest-agent_7.2+dfsg-7+deb12u15_arm64.deb 99d4efa52c6ac0405e658ae7d9fab68db84546d59cb9dd1a62a0daefcaf6f2f1 39433948 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 8feec5d8ef980ba4fef23ac435d934f81919a0e1fcd890c9b5b806112f218385 8199320 qemu-system-arm_7.2+dfsg-7+deb12u15_arm64.deb 54d37139e5a611bf81e74fd1e0b4c3c7c6fa4e790aa97f38a4cc3b76c41275bd 7591716 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 0022c2f46d91e54e6289cf89fcdc7f9db2c994e9786f6151a11e2b731b6f48c2 2085940 qemu-system-common_7.2+dfsg-7+deb12u15_arm64.deb fe9906452e3e19350333bec12f93dad7571d39caff5ac1833bde91a884ee8cf0 1066080 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb d08d2007fb5efb31cb81a0f6ba647639e435f5aff699d7dee3c7701443b20dc5 300352 qemu-system-gui_7.2+dfsg-7+deb12u15_arm64.deb 94a9b7f38425e0c8b19f86f0ff21c36de87150a5b272b0887260b402b67e7fe0 54442652 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 1c483737aef8a129b3fd790b08d6aeef3a697952188f0a21da25a00c7b820596 12064636 qemu-system-mips_7.2+dfsg-7+deb12u15_arm64.deb c523fcce8428c12f2ea32e447898c9156308ae1094156857cf734df720757a42 191075840 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 53d4fd99e001c579e21a57b0c71cf51ad8b1f14c6bcb5bb0e95e78b957dd24ec 42884400 qemu-system-misc_7.2+dfsg-7+deb12u15_arm64.deb 31a5bd93bd85857c41744705fe34032209629bdea7bbaba0fe89b843d6df1021 31010564 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 88ccc10f68712f759106f0c3ee22f0f9f2ad09cb75a59affe4e53b13b057d3e5 6853020 qemu-system-ppc_7.2+dfsg-7+deb12u15_arm64.deb c7ca5f5531a15a9bd37a5b3a33bc97c2334a45cd24f7c2c579d60364d3bdb72f 20205248 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 7492ceeed75c172aa777f17ace0b3febbf6368c30e71c32e376665e99a19b382 4747424 qemu-system-sparc_7.2+dfsg-7+deb12u15_arm64.deb 16289a4aec12aa55d3a730dd0173ae8d8272c1c38a13fcb05925551bd46730d6 28498760 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb c7e4f95c33fcd27cf1b3868c4bbffdab15642effbef0b20b70e060a1f2eac081 6485268 qemu-system-x86_7.2+dfsg-7+deb12u15_arm64.deb 47d4ed9d4fa5b2e5af023c2acbe28b5e1b6207d75f6e8340d5d287cd8b41b314 50536 qemu-system_7.2+dfsg-7+deb12u15_arm64.deb 3608d947765de8152c56f1ccb8d3635e20930134173bac121b557163ed2aa9c1 5392 qemu-user-binfmt_7.2+dfsg-7+deb12u15_arm64.deb 35923f11b846ceb8f84002c0a37176c8bfedf4863f695533917145d509d66c3c 134624240 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 4b82a696fda0ed4faf0ab49fca9dbbad51ec509b21e85a94a6be87bafd629230 131783164 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 29fa1defead05b3e308709580507099a4c70892e4281bc6833e8e84141ce89ba 56387152 qemu-user-static_7.2+dfsg-7+deb12u15_arm64.deb f0f923f19257fa4af1ebb2dfd6505a043adc9244142b0d199ff9945b138773bb 11652416 qemu-user_7.2+dfsg-7+deb12u15_arm64.deb 2f389dc4ecd851ed175e49875ef1c8d7899900a76201ff55915814ee38987aa6 8230600 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb e42c5c5c5d9a6418037c00955846ef8a9e9955b3c2ab6321e1b85b2c841d12c8 1225608 qemu-utils_7.2+dfsg-7+deb12u15_arm64.deb e119707d3b6d7b4aec7e9e02cb49cd861bd87b458b48ffe4ea8fa06b006a8fc7 29944 qemu_7.2+dfsg-7+deb12u15_arm64-buildd.buildinfo Files: 2e02236473008bf6c02548b73e8f1793 289952 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 8ae356dbce35903932b1743638b83d78 100652 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_arm64.deb a4444b22fbc986be63b5d8a92c8a38af 984124 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb fd51ed69ce0556b6e08650ff16001678 327600 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_arm64.deb b7d1e4023affb9ef4b48fa87d88a26d3 39433948 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb e53084f755e7798b5d02361d8bf78e65 8199320 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_arm64.deb 90fa6c78aced6bf93007d5a37ae933b3 7591716 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 0c882323ea3b600e7ba2db59fd9537f1 2085940 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_arm64.deb c2a7fad895ffba034699c84fde3af8b6 1066080 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb dcb60f0be6a030f74ee2e2f8c1d56f5c 300352 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_arm64.deb 8b9bb7f285b28b3ec6940b1d5af6ff5d 54442652 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 390fb97095373cf4f3a35589077e5640 12064636 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_arm64.deb a8832379b0204c88975d2e5301ef901c 191075840 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 7bff3f5e4ed1e9aa36a98594606c2626 42884400 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_arm64.deb b4b9fe627da4a2ddfb774aa46a479123 31010564 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 973ba09cd2b4310ffb4170e5c51515b3 6853020 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_arm64.deb 5894a3dab63e214bfaa8f57854db4302 20205248 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 4fa9e999210086b5a672bd10603982e0 4747424 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_arm64.deb 99e3838929ca4695d9d71a793c17b536 28498760 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb d064e680a95528b99c5b2d9cb43659c7 6485268 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_arm64.deb a08b4522c85d387309e7abcd47659b4b 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_arm64.deb f0ede9b46c87e248ac709dea248c1e95 5392 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_arm64.deb a6b7b7806b3c3ed446c31aa1b5c1ef33 134624240 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 72616912181f9eddd09e694848ec354d 131783164 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb 5a55d8d2eece17b2d358d29510817d9b 56387152 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_arm64.deb 846bb90522c43acc088a1e3ff71d62a0 11652416 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_arm64.deb 19476abf8e02f5cfab16ef8b73a9458d 8230600 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_arm64.deb ae43acce4384c0356ebee8ea5fc37f75 1225608 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_arm64.deb 58258b1bca040aa8cdf7b5b6a67f8102 29944 otherosfs optional qemu_7.2+dfsg-7+deb12u15_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmifu7oACgkQVza3l394 K2D0rQ/9HzOVKszHDUr9/mgArBItIonp8J5lk+imk2kpc7jwNpAnp12ZfqZDppk3 xZoFU6LEPNmKA1fYPrRttNYQKEjlk91FeUosAEfnDjQdDhdSZ9Qn6M3M5wXKehxv nJEU5BS+M9Xgk1DBWSZyZvKyIsXghusDGMHw4P3Wy8ZCB/k/X7HMdkwhI7SMf71k PJhn9zjUw8xy9e2ipcFz8SnLv9BdOo882nGE7rzNdUAr2i78g7tZexGzdUtlwsEh un6Lvd73IcxLOtyfovqcTZGPn7DGHrE+UZurtUa5+5wETYhbo7wF/K3VjnIrYqSj 8Yxo+Cw0RHHa0rTkqE3Tr4GYLPoaSAq/fn1w2Ck0U1tCSK1m3H7vrBrSJWsIJz8W oyjwg4t3ZNRTnJMXeoyB7dqA6MvB55bsbXJnsZ/b17LGIkfrYpbfvDoa3rv+Cqjb OEm2+hrb6q246H5ElIYnPKOLYf8yMYfai3aUgO/KzIKf3JEScCbrDT40dKosXSA/ JwV2LAdLN1b7L8deI4dMgvf3Wopg1GHTO697P061mLEj4SW+nKCK7HV27FbQGmGb MLyvL7pfCHoibhnHOlLH7/p2ziG+sELm341vi3B6WFUjjzWCTCDhrnJtoDW2MJ5d aiwF92yZhXG9e7ZTw1KkNdTIW6xt6uMyqRfrKCMvpHHpRvD8rm8= =pdxd -----END PGP SIGNATURE-----