-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 23:27:17 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-user-static-dbgsym qemu-utils qemu-utils-dbgsym Architecture: i386 Version: 1:7.2+dfsg-7+deb12u15 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (user interface and audio sup qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (1:7.2+dfsg-7+deb12u15) bookworm-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. Checksums-Sha1: 05c9036499886cbac495bb52f1d1216eebd75e3f 271332 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 5f85e32a659e9fc043d193a0bbebf86d6281b1b1 111292 qemu-block-extra_7.2+dfsg-7+deb12u15_i386.deb 285b2fb3542f4a29ea4693b47cb0e1b907207738 790144 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 603280a8267d2623fd2355df39d9dfb5bfdad5ca 369500 qemu-guest-agent_7.2+dfsg-7+deb12u15_i386.deb 629d90a48f48b94bbf6dc05ca39b754cd4c1d7eb 35273600 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 172abaa6b7f5353af91b26671aaf1a5ea9ed82f8 9547268 qemu-system-arm_7.2+dfsg-7+deb12u15_i386.deb a84467ee53e269554af2df65faaa68770090950d 6310344 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 7355aefa9959b658a7a8792bb64e7a28de0c7490 2302300 qemu-system-common_7.2+dfsg-7+deb12u15_i386.deb 0116b6b99135c2103b9548b35fa29f77be6d192b 892300 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_i386.deb f8b565ed6b25bf57e067d2daa112153e583ef5e9 344384 qemu-system-gui_7.2+dfsg-7+deb12u15_i386.deb 00ebb7d0f618144dbbc95c5e1b44efa5e5539079 48722400 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 07f74a60d8954f5ebcc7e2fac648b15cd8b0d14d 14155272 qemu-system-mips_7.2+dfsg-7+deb12u15_i386.deb b8bbab677c6018ea5d6bd65dd2f9d1e79323f1ee 168462384 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb c19e9980a44b33a7d22df17f5b85bafdd69165d4 49325712 qemu-system-misc_7.2+dfsg-7+deb12u15_i386.deb 80337c248b941f8ef73ba3d90e0cfbd433f0915f 27739360 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 5cc355fbe3c51e17c56af05b28f8c0e8baa9f6a9 7964356 qemu-system-ppc_7.2+dfsg-7+deb12u15_i386.deb ba7461350bfdf8ad95e592ba962627b2138d5d35 17938164 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb f51dfe3c9407ffba2c1639611ad44eb990efc948 5527216 qemu-system-sparc_7.2+dfsg-7+deb12u15_i386.deb ba1092be19b5681d145905e95c4d7ae86a847eb6 25961676 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_i386.deb ab7bbc3c0486682f059a795305959911e1d36dfb 7752040 qemu-system-x86_7.2+dfsg-7+deb12u15_i386.deb 80f765a146227b909acd9dc1ed50e6d0275e7361 50536 qemu-system_7.2+dfsg-7+deb12u15_i386.deb 1859223fe9e01fbff1b014cabf2275dbfad7103f 5348 qemu-user-binfmt_7.2+dfsg-7+deb12u15_i386.deb 3a99e5fa8f4b71dd5cd9197860ca7a769a9a0d03 121141092 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 9837df5a4bd2f040f763d4ef8855fe750b3c1daa 118760992 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0ee9229ab09e91c49938b570f3e08d0721f38f21 55095732 qemu-user-static_7.2+dfsg-7+deb12u15_i386.deb bfbe3bcab039a9a93c7904be2846784b6dc4e380 13862388 qemu-user_7.2+dfsg-7+deb12u15_i386.deb 8cc8c62980240b42898438110d24c951c5614f2d 7016176 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 5a431e1d8b9ef2b54f4fed857d5d198eb5aef435 1428796 qemu-utils_7.2+dfsg-7+deb12u15_i386.deb 3c2bbe13cde077568ef478f38f1cfbae9dedeafe 29618 qemu_7.2+dfsg-7+deb12u15_i386-buildd.buildinfo Checksums-Sha256: df8e324eb6dd974b16b56379f684f348eefffae68c9429cc952f03dd92a6656e 271332 qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 55d8a39e467041743e473fcaf8e5066a547ca068648e8f48442a6a7ed74c33ab 111292 qemu-block-extra_7.2+dfsg-7+deb12u15_i386.deb ff1955cb6d69277e72cddd7c26d6afa2d565918ca4478836d3b43ad1cf889c25 790144 qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_i386.deb e43ff0464ced8cbb6d77e21697bddee617124fffe12ac1c91270d9abb9e8cae2 369500 qemu-guest-agent_7.2+dfsg-7+deb12u15_i386.deb 937e475bef9326c724708eaa233eb6f0a6b61720a16e2885967f6b5cfa29169f 35273600 qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_i386.deb ecaef38b118cf6132416b47e81b7c2ec3149b41e909d86626dda2278cf018574 9547268 qemu-system-arm_7.2+dfsg-7+deb12u15_i386.deb 66c8f471293caeabdbcfe740abda370324577fe47a9fa6964ce2a5712be13134 6310344 qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0035343b0262278110cbb36d3f429b970bf0532eb83ebf53a7da25a46653da0e 2302300 qemu-system-common_7.2+dfsg-7+deb12u15_i386.deb 8e503e6bbcadb961b1ee43798b28f13e366639bfbebc8b409c8958fe7da239ca 892300 qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_i386.deb b88a6f9b71800001d2ec37f69e72734065329cf157666aedd46d727f788d9f13 344384 qemu-system-gui_7.2+dfsg-7+deb12u15_i386.deb 75f80a352ed4e81213c5bdc629c8e14eb05246fd3ca825f49c621082b477d34a 48722400 qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 4cad259607ccccbcac2aafc47820c9dc7bb72a1954923b01354932e8bd6a7c9a 14155272 qemu-system-mips_7.2+dfsg-7+deb12u15_i386.deb b33a16001ef9f2a24cc3247f024f153c4ec0e6f206c1f4cab061d7678670fcb5 168462384 qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 63efd3965269d507fef26b43f8f354df6eae30ed10f6c560185b51480bcdb2f9 49325712 qemu-system-misc_7.2+dfsg-7+deb12u15_i386.deb 0f21895275560b20fd66bb40b21c30cc54ddb926f4ea414b2fe763cf7066b5c2 27739360 qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0dbbaa217ca9e60ab017e7b9ac51355d4df88fde47a2c563d77025a009d4e9d2 7964356 qemu-system-ppc_7.2+dfsg-7+deb12u15_i386.deb 040b7be3caa0397c17ebb77aaabdd19d0f1c3f743d1354c0db0c4e97cb81dd25 17938164 qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 6c83cb7b2df9dc3e2d1cb1e10d20aebda129d05bcae271496f484e5a67484f16 5527216 qemu-system-sparc_7.2+dfsg-7+deb12u15_i386.deb ff6d4633908c64d78ac88efc9b7f9f8ca89837f01365de6d2a534a4b5e68b861 25961676 qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 45b80e39d98e7341dfecf63f751ed9864d475eec465ae48a799cc421af971918 7752040 qemu-system-x86_7.2+dfsg-7+deb12u15_i386.deb 7f27c4bedb4b131fc5a8505f39022d8a7d280b824258540885a8b5f25a9b4950 50536 qemu-system_7.2+dfsg-7+deb12u15_i386.deb 26e39263f75b6f9fd53aea919aaabae6e0a62853fb17cc08f08da7fb87877baa 5348 qemu-user-binfmt_7.2+dfsg-7+deb12u15_i386.deb 9f35850b638b1842c3d84af80f1ba3a95cf3009e96efea3623efdecda66851c0 121141092 qemu-user-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0bc2d02b7d0d1019ca28d13fd90f97677ca04155aca54a75fab50cf72bce82f9 118760992 qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_i386.deb f155d63cce09aa36e9774b402b54f17d89ee00be2f467bfc7e25e4f3a5e4022c 55095732 qemu-user-static_7.2+dfsg-7+deb12u15_i386.deb 926a219a8ce295aef90e931976832dfb02ffef81601f4a598d47e1677e1cf60c 13862388 qemu-user_7.2+dfsg-7+deb12u15_i386.deb 4f016d520157dd718b96d94f9517850594b11e5d4a0322ee58c630e067986b5d 7016176 qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0c72c84df5a4888e699635f5223cfee325d8b93c2f27e8b2e75fc159f88096cd 1428796 qemu-utils_7.2+dfsg-7+deb12u15_i386.deb 1cc94c02513d09d96186104f791ec689881faeecc1d87495462a9ae194918ac3 29618 qemu_7.2+dfsg-7+deb12u15_i386-buildd.buildinfo Files: 1aa55b3a6c564dacafbb83264141d2b0 271332 debug optional qemu-block-extra-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 98bdbdc0c6eaa2766f821d664af76c2a 111292 otherosfs optional qemu-block-extra_7.2+dfsg-7+deb12u15_i386.deb d1ab03fb77195ba45cc255291a45a6e5 790144 debug optional qemu-guest-agent-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 6a4d0b8dc9c8094b55ee3a46a7f7a01f 369500 otherosfs optional qemu-guest-agent_7.2+dfsg-7+deb12u15_i386.deb efb9c431c04ec8a96a5605ea816315f8 35273600 debug optional qemu-system-arm-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 53505ef840c511bba184c6c1ada783c4 9547268 otherosfs optional qemu-system-arm_7.2+dfsg-7+deb12u15_i386.deb ea3a52b036de10a7e436fa0866dbf487 6310344 debug optional qemu-system-common-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 430aae4833ec4ed8eb898c7e13670f50 2302300 otherosfs optional qemu-system-common_7.2+dfsg-7+deb12u15_i386.deb f0a9404d4c45cbd2a08ec8e028410718 892300 debug optional qemu-system-gui-dbgsym_7.2+dfsg-7+deb12u15_i386.deb bb4713c086df3818b75183843891dc00 344384 otherosfs optional qemu-system-gui_7.2+dfsg-7+deb12u15_i386.deb c6102934cadc496016212e23bb94c4fa 48722400 debug optional qemu-system-mips-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 739d8000cf62a4e758df5a984efd0bc3 14155272 otherosfs optional qemu-system-mips_7.2+dfsg-7+deb12u15_i386.deb 2f66bdf555bba4b43d4d4eaddb23a4b0 168462384 debug optional qemu-system-misc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 0c757ab3d942e12265d66969b4a2c79e 49325712 otherosfs optional qemu-system-misc_7.2+dfsg-7+deb12u15_i386.deb e514325fe6b910b99b45b7a1e5c5f8d8 27739360 debug optional qemu-system-ppc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb d72d2d91bfdccff8518f48499adf8c9a 7964356 otherosfs optional qemu-system-ppc_7.2+dfsg-7+deb12u15_i386.deb df4c0e8e36e690cc78085377e8ff6a5e 17938164 debug optional qemu-system-sparc-dbgsym_7.2+dfsg-7+deb12u15_i386.deb aa27a9e113184b0c6d5185420679cc40 5527216 otherosfs optional qemu-system-sparc_7.2+dfsg-7+deb12u15_i386.deb 8f5bfe9ececf69053a98f39bff821316 25961676 debug optional qemu-system-x86-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 43c0f579f6a956d2c810925787d37903 7752040 otherosfs optional qemu-system-x86_7.2+dfsg-7+deb12u15_i386.deb 98e4f664f717d106ece758ae33f987e7 50536 otherosfs optional qemu-system_7.2+dfsg-7+deb12u15_i386.deb ea70630870e34945f488518c6e82fd5a 5348 otherosfs optional qemu-user-binfmt_7.2+dfsg-7+deb12u15_i386.deb 15108fb34aadf9f217e57b9dedb060d1 121141092 debug optional qemu-user-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 31e4a6f8873359fb483d9a95f4dfa54b 118760992 debug optional qemu-user-static-dbgsym_7.2+dfsg-7+deb12u15_i386.deb c9cb4381c7a7f50881d56142193d97ef 55095732 otherosfs optional qemu-user-static_7.2+dfsg-7+deb12u15_i386.deb f20ee787e59a4dee6158ceb4d9b61b7b 13862388 otherosfs optional qemu-user_7.2+dfsg-7+deb12u15_i386.deb c7dc076cf49538468518a34b480440a1 7016176 debug optional qemu-utils-dbgsym_7.2+dfsg-7+deb12u15_i386.deb 9d4ca475d81ef5736784f0a756c6873f 1428796 otherosfs optional qemu-utils_7.2+dfsg-7+deb12u15_i386.deb 524cbb6b850a42cd2443c7dc00217f62 29618 otherosfs optional qemu_7.2+dfsg-7+deb12u15_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmifpDYACgkQ8IREj/cR iTPHMA//RBv2HzQyNoaCfWfYHBpFRX8z0hzrqnwpEO1k33qOb/NIhvjXyiLqOUyK A1z7V9VCyjBjjvKBHiDX9WQlIqie6xjqKB6mrZNSi5lMXavxj019UOT3auUY7d8d 5VHx1RD+WR7E7hX3sPgum7DHFfW1XcVxfpJj35inuhorpohtg+16cAAB1HmdjCUO c2H2LHyQ2Ow566FIcEOuEjcURGlWjQbW8OC0rntODXYYL7gqf+zATZwVFHjkRQTF EmFwjgQ827P9iRqgGs2yu2JsipJRkd9r5YoEhJ/mibjOQmL6N2h1l3n3VNDoOJC8 f3POp54HGrlPeufJT4zrQA01Rayctfjpt3+b8+Z2+ZqS+G8bpGWmIDIGc265h+HL PLoZa73bXf56BiRjav5Jyk9wT4ieUsb2MGTJiaTzMgvRyjAwV/SKszu+6SqOQJku 3czQqBGf6FCKRLVGgzXCJ4sDQicir6R3vg4DaHOG5NpHcrENIgskSh6pqq9nlkMb FtEFSsofSMv8Go1qopoRUkVl5xphZUuTZNiPmp9WDPmZ7GbND9Fx9Ll+XGwiCcFf rypBCHnndXu3IrXcqjvABRO9h0bFB17DLzKOwt5edLibtAZkLkVvrSWBoQBXNLhU KlfrOQRAqOfRRkob6Vi4MOKmV7yLDsj7F4Vzbu4a3YVVEiZTw0g= =ZjDJ -----END PGP SIGNATURE-----