-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 22 Jul 2020 11:21:45 +0300 Source: qemu Architecture: source Version: 1:3.1+dfsg-8+deb10u7 Distribution: buster-security Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 964793 Changes: qemu (1:3.1+dfsg-8+deb10u7) buster-security; urgency=medium . * acpi-accept-byte-and-word-access-to-core-ACPI-registers.patch replace acpi-tmr-allow-2-byte-reads.patch with a more complete patch Closes: #964793 * xhci-fix-valid.max_access_size-to-access-address-registers.patch This is another issue revealed after the CVE-2020-13754 fix * slirp-tcp_emu-fix-unsafe-snprintf-usages-CVE-2020-8608.patch (and a preparational patch, slirp-add-fmt-helpers.patch) Closes: CVE-2020-8608 Checksums-Sha1: 658447a2fcb2a49dcb0d6d4e4517b1a3c9759a3a 6155 qemu_3.1+dfsg-8+deb10u7.dsc 385ba7f1e80e01bd6b2fe74bacf1728bb73a8d1b 111272 qemu_3.1+dfsg-8+deb10u7.debian.tar.xz 4159e5bc5ed46a61346d19d3821b3153869a79b5 8663 qemu_3.1+dfsg-8+deb10u7_source.buildinfo Checksums-Sha256: 8eca0b49e3dae4d8760a95ecc0eae6edb447620adf043549a078dfe12035e099 6155 qemu_3.1+dfsg-8+deb10u7.dsc 706fb44f8876f7c9cce576fe9b2dda154522cf4b548f544ef7a77e2680cf975d 111272 qemu_3.1+dfsg-8+deb10u7.debian.tar.xz 79ecdf5df97719d3ec2d235cb398176f2f3c2b96f11da309208029557f00e57f 8663 qemu_3.1+dfsg-8+deb10u7_source.buildinfo Files: 2aea51fd9090c54be269c20220145bea 6155 otherosfs optional qemu_3.1+dfsg-8+deb10u7.dsc 2d356722f077e7b347b6432451835d72 111272 otherosfs optional qemu_3.1+dfsg-8+deb10u7.debian.tar.xz 9bc38f2b7bc9abb7816f3499e507f497 8663 otherosfs optional qemu_3.1+dfsg-8+deb10u7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAl8X95YPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5ZpR4H/0i5/9c9uBhxkh6YPg1VQyo4uRnlDf+2DaW4 n1Jd0qxUfgzdsAz9qtLZOePZZYYTkBcVwDx3eUAshWGyZ7M7ri8IaGSSsuY7ciaX 0sC7e0NSgSGCN203kQDVxFRAitDGffA6Z5YcPHcgL1ObKsuU0rFTxm+eOvyA9jbf l1+x5IUQVA3YUGvuyB/cBDqyXvVscfgLPimnJI2ki7/rwIH/z2lVJ4AOIlU9WEY1 hRcwN4UFEs7lpXC1epi3VZc40vKXoHkjoPQuVJ6M38nd2+HquyvCSbRo7DupTPp2 PL8KMtO+JO5f4aH3l3lh9jxgU5Y49mKTtoOXznV1RE4a6X5/kYI= =b/dh -----END PGP SIGNATURE-----