-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 Jan 2020 23:16:06 +0300 Source: qemu Architecture: source Version: 1:2.8+dfsg-6+deb9u9 Distribution: stretch-security Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 939869 Changes: qemu (1:2.8+dfsg-6+deb9u9) stretch-security; urgency=medium . * slirp possible use-after-free in ip_reass(), slirp-ip_reass-fix-use-after-free-CVE-CVE-2019-15890.patch Closes: #939869, CVE-2019-15890 * slirp emulation fixes, Closes: CVE-2020-7039 tcp_emu-fix-OOB-access-CVE-2020-7039.patch slirp-use-correct-size-while-emulating-commands-CVE-2020-7039.patch slirp-use-correct-size-while-emulating-IRC-commands-CVE-2020-7039.patch Checksums-Sha1: d216a72c54ecc75a374558799c8c145e0afad1ef 5579 qemu_2.8+dfsg-6+deb9u9.dsc c127641eda1cba8696bfa7b8bdacf494ddfd4b31 163692 qemu_2.8+dfsg-6+deb9u9.debian.tar.xz 9078bd251af7789d0b49555bee4b941f41993b6a 8129 qemu_2.8+dfsg-6+deb9u9_source.buildinfo Checksums-Sha256: 8e072e0542d6ed8ad12081238b22001aae6e1ef8a68a847cf62e6ab0bf24ad24 5579 qemu_2.8+dfsg-6+deb9u9.dsc c074fd992b4215d0b77c09db91b18a4693fc0c73da57fff25e1f5fd06bfd340f 163692 qemu_2.8+dfsg-6+deb9u9.debian.tar.xz ef2193bb439161e6e3bbe9ea59e8d39484178fc22bcc00114f6fd6441a48c127 8129 qemu_2.8+dfsg-6+deb9u9_source.buildinfo Files: a92eab2c15a2c2238bceaa5efdea1d96 5579 otherosfs optional qemu_2.8+dfsg-6+deb9u9.dsc 0eb5a8c6e7e8f61b3debe7ae1a2df7a9 163692 otherosfs optional qemu_2.8+dfsg-6+deb9u9.debian.tar.xz f2492a3d95fd37f2a9f84101d1061546 8129 otherosfs optional qemu_2.8+dfsg-6+deb9u9_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAl40hCgPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZbpoH/2evUh1OpYDZzpmHypMT/iYtetZVybSYNEIP DsR/hn4jHQBVMbQjiBP6jFEdnjfV1PQcysIiBxdN7OUvYOyeQI1wEHCl1c3T3HPJ nBU8pZZhAsyGjHSxacEePu+JxOecPaB3LTECZYGZXS6dJWHwJKmlCuyQvLcE1exY LN7W39WT6Ly3SuUSkp1LPh1CyHVsB8Mu7rYu47rmcYmxC18ZAHWgZaqR4XonfHT6 4L98NaB7L6o7ET/g86a5nks/StcJ+BNeio58ymUHfIKcKZsp4d6W8VaorXrvmIPc zGEVKLoTYpH8tjqfcP+Qyvu/HOeIdOFZ8Ahwrub82oqWsaw6Cr0= =mmca -----END PGP SIGNATURE-----