-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Aug 2025 12:54:40 +0300 Source: qemu Binary: qemu-block-extra qemu-block-extra-dbgsym qemu-guest-agent qemu-guest-agent-dbgsym qemu-system qemu-system-arm qemu-system-arm-dbgsym qemu-system-common qemu-system-common-dbgsym qemu-system-gui qemu-system-gui-dbgsym qemu-system-mips qemu-system-mips-dbgsym qemu-system-misc qemu-system-misc-dbgsym qemu-system-modules-opengl qemu-system-modules-opengl-dbgsym qemu-system-ppc qemu-system-ppc-dbgsym qemu-system-riscv qemu-system-riscv-dbgsym qemu-system-s390x qemu-system-s390x-dbgsym qemu-system-sparc qemu-system-sparc-dbgsym qemu-system-x86 qemu-system-x86-dbgsym qemu-user qemu-user-binfmt qemu-user-dbgsym qemu-user-static qemu-utils qemu-utils-dbgsym Architecture: s390x Version: 1:10.0.2+ds-2+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Michael Tokarev Description: qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-gui - QEMU full system emulation binaries (graphical display and audio qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-modules-opengl - QEMU full system emulation binaries (OpenGL display modules) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-riscv - QEMU full system emulation binaries (riscv) qemu-system-s390x - QEMU full system emulation binaries (s390x) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation (static binaries) qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation (compat/transitional package) qemu-utils - QEMU utilities Closes: 1109989 Changes: qemu (1:10.0.2+ds-2+deb13u1) trixie-security; urgency=medium . * d/binfmt-install: stop using C (Credentials) flag for binfmt_misc registration. qemu-user binaries were never meant to be used in suid/sgid scenarios, but was used in debian since late 2009. Any foreign suid/sgid binary accessible to the users, in presence of qemu-user binfmt, is trivially exploitable to gain elevated privileges. This change might break existing setups since for many years people relied on qemu-user binfmt working with suid binaries, but this is a situation where it is definitely better be safe than sorry. * pcie_sriov-Fix-configuration-and-state-synchronizati.patch (Closes: #1109989, CVE-2025-54566, CVE-2025-54567) Checksums-Sha1: 7342838373760218a5832faec97c45d86368d2a0 243752 qemu-block-extra-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 639e33c7759473d7375e1006d81daaf191bb2d3d 109684 qemu-block-extra_10.0.2+ds-2+deb13u1_s390x.deb f648980a505ef58a6574e128648e33a0c500cea2 1033972 qemu-guest-agent-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 1b65421e133562ce82edf4ead2e9bd0deae26a08 519620 qemu-guest-agent_10.0.2+ds-2+deb13u1_s390x.deb d842a8f7a50634bf82cd64829137ba6ef2f1b966 39919016 qemu-system-arm-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 4d9c866140d48d74ffdaa80b046920e47176b08e 9431196 qemu-system-arm_10.0.2+ds-2+deb13u1_s390x.deb c1d3878936c974b7ee736e13db0a095aa7207e77 2165120 qemu-system-common-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 5fe84f5986b5f390210d537552f5287318441214 849176 qemu-system-common_10.0.2+ds-2+deb13u1_s390x.deb 82e615d9232318c211c43709c8c77486b9f57ca8 1118200 qemu-system-gui-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb ccb76da1d2b796617da56c94231d14a8ec0a4c25 321132 qemu-system-gui_10.0.2+ds-2+deb13u1_s390x.deb 9e9c50ef10114dab019200d30cb714feb4e7bece 54048488 qemu-system-mips-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb e549bc05a0352d2327aba6c5357768a6f9b822fd 13888812 qemu-system-mips_10.0.2+ds-2+deb13u1_s390x.deb a93db79fca436bb59761f223a61ab1144cf3660c 139227608 qemu-system-misc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 6e9d64095c90a835cb0818280224247514b011e7 38536308 qemu-system-misc_10.0.2+ds-2+deb13u1_s390x.deb c6d61d5fedca29e4b2ef50b2937a0cbe7d002593 569076 qemu-system-modules-opengl-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 419dca05b58321f679c7226f78dff0bf90c06f8b 163196 qemu-system-modules-opengl_10.0.2+ds-2+deb13u1_s390x.deb 2c6954cfbfbe242459dce10656f321e3bf5b7eb3 30771052 qemu-system-ppc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb ac04f55f61ae0c8a5605fe1b4a336546ec205b10 7695008 qemu-system-ppc_10.0.2+ds-2+deb13u1_s390x.deb 887d9a9adb87e8907977bac92305d17a6285e81e 29456964 qemu-system-riscv-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb f43fca18051496698f995aabfe16f1189951d435 7238316 qemu-system-riscv_10.0.2+ds-2+deb13u1_s390x.deb 04f86c85a59f2098c96161f5a28ef06cae0d4ccb 12540208 qemu-system-s390x-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb f681bd06b9c15204713986b8b3a35c12a0418d6f 3025208 qemu-system-s390x_10.0.2+ds-2+deb13u1_s390x.deb ee13e41ce8b0a5f175898b808ad9724415c9ac72 20819200 qemu-system-sparc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 444c7298eac4c5fd9d58dd69f5e40bc8b9929480 5372816 qemu-system-sparc_10.0.2+ds-2+deb13u1_s390x.deb 6c17a4fb4955de6e6a59f53d3f93e8c3be6ed4f1 28736548 qemu-system-x86-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 626daf704723d3aa7ac70fcb433d1a9120d1e762 7433808 qemu-system-x86_10.0.2+ds-2+deb13u1_s390x.deb d952a5f866f4cdfa6893c18f9bec9aeaeefa97a3 50068 qemu-system_10.0.2+ds-2+deb13u1_s390x.deb d47ffecfde10c5f46f4ac6900a8de3d93cab3649 2088 qemu-user-binfmt_10.0.2+ds-2+deb13u1_s390x.deb abff9c59ed78516372f82b8e4b1165589c2717f4 137236436 qemu-user-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 39eb3dcb7beabffe849fe559bec8c3faaed263a5 53136 qemu-user-static_10.0.2+ds-2+deb13u1_s390x.deb 9712bf8f23fb2e791725232b6e61986b1a587cee 70304808 qemu-user_10.0.2+ds-2+deb13u1_s390x.deb 8e98624aa7af99cd1bbb46179abd8d01ff3618a1 10820644 qemu-utils-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 03ccb38494ac6beb7ac03eee1e1dcd87bdc944fd 1811360 qemu-utils_10.0.2+ds-2+deb13u1_s390x.deb ad641a99337e4a11e00d66b9334fa5fe4d15fb78 31693 qemu_10.0.2+ds-2+deb13u1_s390x-buildd.buildinfo Checksums-Sha256: 010affa704049bbeeef7f657bbb0bf2ca16caa2c4c21a3a92fc8d5d106141018 243752 qemu-block-extra-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 266ed3da2643ccf753d2d3a1525e650efab6e442c3e62d44bcc6dac06bc62d81 109684 qemu-block-extra_10.0.2+ds-2+deb13u1_s390x.deb f9df85cae0a1a714500420f1d469ed0122ad8a4960b422b02b37221a3bea1fee 1033972 qemu-guest-agent-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 12be5efff45d4ab6846a5cc02471baef9b37662ece06ce10151afad338b119f8 519620 qemu-guest-agent_10.0.2+ds-2+deb13u1_s390x.deb f7e131f9cdeee86bb80e2b0b15f2d51e9d267f89200a19e0dffeda3402cec675 39919016 qemu-system-arm-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb cec4b1454f513b48d34a04c3d770584b62a150937588aa81023595301c4310fc 9431196 qemu-system-arm_10.0.2+ds-2+deb13u1_s390x.deb fb599e60a44c80021dac3d9e2106d2829b358cb3b243c21834547cb981f3a44c 2165120 qemu-system-common-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb d45a0c0ce540d38f1fb3541acaf27055bcbdbd6d87881b5916a3818281035fee 849176 qemu-system-common_10.0.2+ds-2+deb13u1_s390x.deb 9e04fbacfa325e38318cde91a425c4daeefefe47d386c3e8c83e387536d810b0 1118200 qemu-system-gui-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 7c90739195c9ad889674a537f81534c6b9fbb60bbb93e95369e0de9834d92bb2 321132 qemu-system-gui_10.0.2+ds-2+deb13u1_s390x.deb 82a24370df85609b4f7276641a5078976dc733daad90342c6c52ae84559b187c 54048488 qemu-system-mips-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 4f196d2e3f7f66e936395eb6842774ea89991b7abf3099ec14c706931fe31810 13888812 qemu-system-mips_10.0.2+ds-2+deb13u1_s390x.deb 8b925b2df53e0a97c55519fa372e65d3d5d932cca001693fe17547916994203b 139227608 qemu-system-misc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 834c5c7740a04b94af9b43b70b7c4ffe8aed923f28e0763d4864f563117f4901 38536308 qemu-system-misc_10.0.2+ds-2+deb13u1_s390x.deb ec30a9a46beb2316e08212d33e8fbde8d120f1cda161ed8dce125dcc4959b24e 569076 qemu-system-modules-opengl-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 6c02d963308c9c21322138b24f709a63ec9f635b4950910e4ccea3a3e31c8569 163196 qemu-system-modules-opengl_10.0.2+ds-2+deb13u1_s390x.deb 27b5aae1e12ff406e48006c384b651337be95c6fc79b50fba729370c6f72d1e8 30771052 qemu-system-ppc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 1f53284d4f70b98f9857d6f9d59305761c1756ec87613a913ff291527042503c 7695008 qemu-system-ppc_10.0.2+ds-2+deb13u1_s390x.deb 8148d5f5498c854043b2c26e8d6e00dc74735a3fdabf1b33141cb29794815a7d 29456964 qemu-system-riscv-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 204a9b531ad29774bc98223dbf2e83e27c98b6f911c36df39b73c47d9b1a8187 7238316 qemu-system-riscv_10.0.2+ds-2+deb13u1_s390x.deb f7093e5a7bc41e9275e8fb492851678081f7c84753156288c1f4ba7db7e04e54 12540208 qemu-system-s390x-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 63672efa8326bc3791e2e54125733b513a795261298f6538a60acf2c22cb6008 3025208 qemu-system-s390x_10.0.2+ds-2+deb13u1_s390x.deb 430751ae1e9011731a5d9e6db6604043db9a7f1b7467ffb955160e00c67662a1 20819200 qemu-system-sparc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb ea956526486f949c841b04631543d3d85adecc95935572b41dd5e8540ebee7fa 5372816 qemu-system-sparc_10.0.2+ds-2+deb13u1_s390x.deb 7066278e96e7837530ad8055543a33a75746098f1295e8a5c7088300b861689d 28736548 qemu-system-x86-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb ce2fe00353bcae5d5e60788b6681ec2933983b9e3871fa4d8b1f2903e818c1aa 7433808 qemu-system-x86_10.0.2+ds-2+deb13u1_s390x.deb 265a686d161416522576174ab76f36c1592a1f74b40bb7a7cb1aff1911bf5ae1 50068 qemu-system_10.0.2+ds-2+deb13u1_s390x.deb b2b28ed00792a5dd01d6d4cb46500b2cfb1ae55729ac59b9986765a496fe5c52 2088 qemu-user-binfmt_10.0.2+ds-2+deb13u1_s390x.deb 01dbdb8fafc92151ba837c3f628c1f1a1dcd3f85865cce7101ea4d408ad47f4c 137236436 qemu-user-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 5c0bbe7d5da94ddde450dced028a7ba381a7d6d77c297b4a18c2f2a4d62e6f07 53136 qemu-user-static_10.0.2+ds-2+deb13u1_s390x.deb f86fdad0b562c842cde81541664c325bea66e42020fbb2248014fd76eea7b872 70304808 qemu-user_10.0.2+ds-2+deb13u1_s390x.deb a13d0b2113905cadc9d1c0434502b83e33028dc22152bf37ee7378fe9eb402ad 10820644 qemu-utils-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 22e22e8da751d8031b1f88cfd60a8945db93fa4dec608f4643ec98114fee7116 1811360 qemu-utils_10.0.2+ds-2+deb13u1_s390x.deb 01fc18206c998dfc68906633c226ad665adae444c5aa1c62c62620071dfdd058 31693 qemu_10.0.2+ds-2+deb13u1_s390x-buildd.buildinfo Files: bc46489571cb10529c1d639527493e50 243752 debug optional qemu-block-extra-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 1490700dc4bd55f9e950b62cea71c6f4 109684 otherosfs optional qemu-block-extra_10.0.2+ds-2+deb13u1_s390x.deb 1fe9f9952d84a3d465e3aef2d91f6893 1033972 debug optional qemu-guest-agent-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 210fa623291d431f98c8bce6cd6fb040 519620 otherosfs optional qemu-guest-agent_10.0.2+ds-2+deb13u1_s390x.deb 66f0b3dda7f704e7524ff6a55a8624a4 39919016 debug optional qemu-system-arm-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 6c2eb1181f48f3eba89d831566cacb3d 9431196 otherosfs optional qemu-system-arm_10.0.2+ds-2+deb13u1_s390x.deb 4f700c15dcd8470c43e8d34a3abe429d 2165120 debug optional qemu-system-common-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 8a73fc29693b66a75d6b0145c0935608 849176 otherosfs optional qemu-system-common_10.0.2+ds-2+deb13u1_s390x.deb 2f73085fa25f6762f00f488b57e9059c 1118200 debug optional qemu-system-gui-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb bb51a2e8430ef787ffb5b420defc4868 321132 otherosfs optional qemu-system-gui_10.0.2+ds-2+deb13u1_s390x.deb e40952f31eef67f02b64bcb450a6f427 54048488 debug optional qemu-system-mips-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 9e01f769a16c48437b2ebc360e34a354 13888812 otherosfs optional qemu-system-mips_10.0.2+ds-2+deb13u1_s390x.deb 63ab8f2811e61e67ccd149aad14129cb 139227608 debug optional qemu-system-misc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb fc6bf603c3b98402fba88c6a2dce73f8 38536308 otherosfs optional qemu-system-misc_10.0.2+ds-2+deb13u1_s390x.deb da472b206f09c3cf4efa79e715bccd63 569076 debug optional qemu-system-modules-opengl-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 1a069fe9a552dbf637e7c817de011794 163196 otherosfs optional qemu-system-modules-opengl_10.0.2+ds-2+deb13u1_s390x.deb f5e2433d9e1b813ac26b33dd80dbfa59 30771052 debug optional qemu-system-ppc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb de3eda744605512b7b173a7d74678bd4 7695008 otherosfs optional qemu-system-ppc_10.0.2+ds-2+deb13u1_s390x.deb 94c2832d07b325af5c313430b6e9fdc6 29456964 debug optional qemu-system-riscv-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb c225bfa51d2aec1c353d44787157c85b 7238316 otherosfs optional qemu-system-riscv_10.0.2+ds-2+deb13u1_s390x.deb c50a37f057b71f64521ee4ea638d21a0 12540208 debug optional qemu-system-s390x-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb a8db0f614593b1270e39ef9585d0eaf2 3025208 otherosfs optional qemu-system-s390x_10.0.2+ds-2+deb13u1_s390x.deb a708a88c4a85868c4f07378cad2e1a08 20819200 debug optional qemu-system-sparc-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 756e773ebfa34e84181f8e419357dce9 5372816 otherosfs optional qemu-system-sparc_10.0.2+ds-2+deb13u1_s390x.deb f75f0fc59c586dc0a2e5b369766c7c23 28736548 debug optional qemu-system-x86-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 9bdf3c078aabdc782e261f51197f200f 7433808 otherosfs optional qemu-system-x86_10.0.2+ds-2+deb13u1_s390x.deb ab73453d815f3dd393911140d35dce50 50068 otherosfs optional qemu-system_10.0.2+ds-2+deb13u1_s390x.deb aa88205b45ab1595d971dbd66b24045b 2088 otherosfs optional qemu-user-binfmt_10.0.2+ds-2+deb13u1_s390x.deb 2ea5527a24d77efe8db5414a00422c6e 137236436 debug optional qemu-user-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 44444c5aff2cbd1572ac84004eae91e2 53136 oldlibs optional qemu-user-static_10.0.2+ds-2+deb13u1_s390x.deb bb126a0bd4ceb4183ffece9a0eee47fc 70304808 otherosfs optional qemu-user_10.0.2+ds-2+deb13u1_s390x.deb 8c37cef70021b311c72bb1280c09298c 10820644 debug optional qemu-utils-dbgsym_10.0.2+ds-2+deb13u1_s390x.deb 0b83952ad7f91ad75d6553b91692f5bd 1811360 otherosfs optional qemu-utils_10.0.2+ds-2+deb13u1_s390x.deb ec758658dcad8ad63bd70891ca45949e 31693 otherosfs optional qemu_10.0.2+ds-2+deb13u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmifuBwACgkQAKOyQzsW VasZ7g/+LJbDjHNMUrR9vu5tYaMH9MHeLXR7tNTqBksZ0Jh6j2xwSVGF8yDDeYbM CHDQCp3G60sbeYcAMot4Vj6kFQAlD0+mFPkhIaVes2cbur4XNtAgejZ9CRNhhKW5 vRZWQeJw7vjusQU7tdL2rf1HzQJO96Qs54TTDxCnEJCTCe/5N31SzyU9CszhG6ht qnnj4GB9O1p4fe1XMFIxzlMe92zomXGJ2eCF2pCcGJ/iVEMUYEsSCvbqZJsVEfXn BXJLzJzgeVRgeuofMlq2q9JAI2kqe3v9xihPXxBX/bPhjw5hN6juJXuxjY3aLhzv A3wxO4U/6P+wQI7CDLoHaEkY5m8wobG8kLdZq22/CBdemhH87CTvuwgGWoNR5y8K qtLIn5IP9dkcjCcqQ6NB1QX/B+fS+oWYeI+jVTCaWAQ1pckdVKuwkBhcAJKE4JTf ZHhdJkWjCjsdVgNTs3f4kF2duFYD+5NjYcnXor8jWKRBJCwj6LF9PNo3pomHGt3+ xzVyQ4nL0vuObXhCFZmkH7YFio+pvNhZSSFLePBZVFQMmn7Ipegb70LXHe3MAn8/ uCr0gJBvh/5ULlJyKAkB0omuZhfdq5fhgmVWV9HyDR36XZAqYwIwJ7EwX/coyzSv a5ZwgizuNqKcQOg99K71zvKHDV9mWOmtGQHQWp+QNDXsfNG8aGw= =2Xqt -----END PGP SIGNATURE-----