-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 13 Sep 2022 20:08:43 +0300 Source: qemu Architecture: source Version: 1:7.1+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian QEMU Team <pkg-qemu-de...@lists.alioth.debian.org> Changed-By: Michael Tokarev <m...@tls.msk.ru> Closes: 1014589 1018055 Changes: qemu (1:7.1+dfsg-2) unstable; urgency=medium . * tulip-restrict-DMA-engine-to-memories-CVE-2022-2962.patch fix possible stack or heap overflow (tulip: DMA reentrancy issue) Closes: #1018055, CVE-2022-2962 * hw-pvrdma-protect-against-guest-driver-CVE-2022-1050.patch fix possible use-after-free in paravirtual RDMA device. Closes: #1014589, CVE-2022-1050 * mention closing of #979677 (CVE-2020-14394) by 7.1 * d/rules: parametrify extra-cflags & extra-ldflags * d/rules: explicitly disable pie on arm64 due to https://sourceware.org/bugzilla/show_bug.cgi?id=29514 Fixes FTBFS. Checksums-Sha1: 41c3b9dafe66e6f6949eb7f686599afd38cb4f0d 6453 qemu_7.1+dfsg-2.dsc 782a65b79f63788882f47a9b953f90b6c9a39af6 103420 qemu_7.1+dfsg-2.debian.tar.xz c88a3580ac4ec884bbbc26be97ff9cb90409b981 13614 qemu_7.1+dfsg-2_source.buildinfo Checksums-Sha256: c1aee5326dfcdc8ee9ef3c6966f02267a6de13c6a4bf8e3b156d28ec51015486 6453 qemu_7.1+dfsg-2.dsc 98c6d50a23f17a525865da598b46391deeb48172534c64d93e8f33a485ec0a47 103420 qemu_7.1+dfsg-2.debian.tar.xz 42cbba779d5021d1c8581ce4d5a1d8a701b53ff96835ff5aca612b4a896ba03e 13614 qemu_7.1+dfsg-2_source.buildinfo Files: 3f3807799504f0d3475aa1631a4c7918 6453 otherosfs optional qemu_7.1+dfsg-2.dsc 2bc8542624a8f3cf04272b176f81eb37 103420 otherosfs optional qemu_7.1+dfsg-2.debian.tar.xz 62e8fa1915bd1dc55c0a24a57a91d2c9 13614 otherosfs optional qemu_7.1+dfsg-2_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmMguUQPHG1qdEB0bHMu bXNrLnJ1AAoJEHAbT2saaT5Ze6UH/iFneM7O5AZxJGx6HdHQ1a+pa661+4PbbCHF 6i7z2x1mD/EPsXMbGu/54QseVd00I3EdK12n9+knQ+eKs4qECeKYdLxi587NAOoV 5NCA4I48n5RnRlTTjKlW15aiVjAoqWuQ/91eNRZcc2zzikHo6lBg5JJoyoQUp2ij CSuy/XI79i/h1jc+sHQvLyX7fBydkieRpQoGvwGnfhh8Arrp0LfhilPCQAIoPv6B NpVOFzlsWIMsk6yIkM+DDYWtZj0rQdVp38vyjdyUtLadcxBhGFTqw1T77KQaSaNW dz4MdWU/kPS+uJ53WuZK8bIuQIYzr2fpQcon8kqeFnxngtkgLqo= =B6oC -----END PGP SIGNATURE-----