-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 12 Aug 2024 07:06:03 +0300 Source: qemu Architecture: source Version: 1:9.0.2+ds-3 Distribution: unstable Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org> Changed-By: Michael Tokarev <mjt@tls.msk.ru> Closes: 1075919 Changes: qemu (1:9.0.2+ds-3) unstable; urgency=medium . [ Sergio Durigan Junior ] * d/rules: Install block-gluster.so (instead of block-glusterfs.so). . [ Michael Tokarev ] * d/control: vdso is needed by qemu-USER targets, not system * d/control, d/rules: instead of requiring the same version of qemu-system-data for vdso, use a fixed version of last interest * d/rules: build both opensbi64 and opensbi32 firmware (was 32bit only) * d/rules: simplify openbios build rule with patsubst * d/rules: --disable-containers * +virtio-net-Ensure-queue-index-fits-with-RSS-CVE-2024-6505.patch (Closes: #1075919, CVE-2024-6505) * CVE-2024-7409 (nbd server DoS) fixes: +nbd-server-Plumb-in-new-args-to-nbd_client_add.patch +nbd-server-CVE-2024-7409-Cap-default-max-connections.patch +nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch +nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch Checksums-Sha1: 6fd749bfb3702e71f6d9798cdb70aa551b06096a 11409 qemu_9.0.2+ds-3.dsc 18991fed60f58e39dbc1aad6a46732c94ba9c7cd 125264 qemu_9.0.2+ds-3.debian.tar.xz 7c44445e46e61e5cc7ef43a5d4145a5dcb03be85 8255 qemu_9.0.2+ds-3_source.buildinfo Checksums-Sha256: 0f392a3ef8939ce65f19e56865ac5df685ba1a4ee023c71f742b75e343c40d0d 11409 qemu_9.0.2+ds-3.dsc 93d5cecc6fd57adb007b666975711779ea9105e294f4fe5172b126c08211d32c 125264 qemu_9.0.2+ds-3.debian.tar.xz fe349bf34202087cc45fb81ff0912b69ac334f92dab6adea239b12018e2e3f9a 8255 qemu_9.0.2+ds-3_source.buildinfo Files: bf1ab21790824a52daabdee31d0d0396 11409 otherosfs optional qemu_9.0.2+ds-3.dsc 575b6cf9960bf3c3947fecbec3545504 125264 otherosfs optional qemu_9.0.2+ds-3.debian.tar.xz 4d870dcf72651c86e8c77e2b0ed7628d 8255 otherosfs optional qemu_9.0.2+ds-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQFDBAEBCgAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAma5ilsPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5Z3JoIALcvNCLJr4MJ6KgweNwqOm2WQCvoEaBtOasa 0QZUK+9XS6nHQjsrJJSwCl8j94r/6bZdYpwPT0HsH3a5eN96tfk3Pz/qqHXlXr1T nXs5zyWzsuyGQFl/bWRlPjqSCCnZdXX2RmYMPhd/jyYIAfkobN+Z/3GyELUJsBsX KJKktYNYuxUHVzsmdA8sCt4zDJCxNk2nn+IBEQhNLfPVYg8a1kpiFCZmPYvOGt9O Sih5DefyhEaJPc6+Hhlt9hxehzpXNBwWvHxFa9pprYRqs83MuJDLu74qyDbUdK52 opIGl3DEdbqyqxvZapRYU4R3frYF2SnhiUjvQ3YwH9y3dvzgW0I= =wng2 -----END PGP SIGNATURE-----