-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 29 May 2019 14:39:09 +0300 Source: qemu Binary: qemu qemu-system qemu-block-extra qemu-system-common qemu-system-misc qemu-system-arm qemu-system-mips qemu-system-ppc qemu-system-sparc qemu-system-x86 qemu-user qemu-user-static qemu-user-binfmt qemu-utils qemu-guest-agent qemu-kvm Architecture: amd64 Version: 1:2.8+dfsg-6+deb9u6 Distribution: stretch-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Michael Tokarev Description: qemu - fast processor emulator qemu-block-extra - extra block backend modules for qemu-system and qemu-utils qemu-guest-agent - Guest-side qemu-system agent qemu-kvm - QEMU Full virtualization on x86 hardware qemu-system - QEMU full system emulation binaries qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscellaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Closes: 901017 902725 911499 912535 914599 914604 914727 916397 921525 922635 929067 929353 Changes: qemu (1:2.8+dfsg-6+deb9u6) stretch-security; urgency=medium . [ Moritz Mühlenhoff ] * slirp-correct-size-computation-concatenating-mbuf-CVE-2018-11806.patch (Closes: #901017, CVE-2018-11806) * qga-check-bytes-count-read-by-guest-file-read-CVE-2018-12617.patch (Closes: #902725, CVE-2018-12617) * usb-mtp-use-O_NOFOLLOW-and-O_CLOEXEC-CVE-2018-16872.patch (Closes: #916397, CVE-2018-16872) * rtl8139-fix-possible-out-of-bound-access-CVE-2018-17958.patch (Closes: #911499, CVE-2018-17958) * lsi53c895a-check-message-length-value-is-valid-CVE-2018-18849.patch (Closes: #912535, CVE-2018-18849) * ppc-pnv-check-size-before-data-buffer-access-CVE-2018-18954.patch (Closes: #914604, CVE-2018-18954) * 9p-write-lock-path-in-v9fs-co_open2.patch 9p-take-write-lock-on-fid-path-updates-CVE-2018-19364.patch (Closes: #914599, CVE-2018-19364) * 9p-fix-QEMU-crash-when-renaming-files-CVE-2018-19489.patch (Closes: #914727, CVE-2018-19489) * i2c-ddc-fix-oob-read-CVE-2019-3812.patch (Closes: #922635, CVE-2019-3812) * slirp-check-data-length-while-emulating-ident-function-CVE-2019-6778.patch (Closes: #921525, CVE-2019-6778) * slirp-check-sscanf-result-when-emulating-ident-CVE-2019-9824.patch (Closes: CVE-2019-9824) . [ Michael Tokarev ] * enable-md-clear.patch define new CPUID for MDS (Closes: #929067) (Closes: CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091) * qxl-check-release-info-object-CVE-2019-12155.patch fixes null-pointer deref in qxl cleanup code (Closes: #929353, CVE-2019-12155) Checksums-Sha1: d7d9fbe6e5028ff6e017bc12d5fa863f65984345 275988 qemu-block-extra-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 4887f4ea6fbed568a048254869e0c50909b55ee0 105970 qemu-block-extra_2.8+dfsg-6+deb9u6_amd64.deb 13c1345dbb452ac098317875783a5806c4659eb7 770872 qemu-guest-agent-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb c34f83b2436ae2ef081bbf95688a6b40519d39e7 315062 qemu-guest-agent_2.8+dfsg-6+deb9u6_amd64.deb 8d8630431ef051804430b32b1fa579a0fa77808a 67284 qemu-kvm_2.8+dfsg-6+deb9u6_amd64.deb 7584b953b72ecc13734bf45ae6e91b04af305977 33553532 qemu-system-arm-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 496a9dd6bb65b1b093421a0d4ab15b2687098b27 5263404 qemu-system-arm_2.8+dfsg-6+deb9u6_amd64.deb 9e16fe3f511a4356709e627e6433c38f1e70f66d 329616 qemu-system-common-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 73ea759a47ff97d4bd1a724c57ce53499fe655f3 502548 qemu-system-common_2.8+dfsg-6+deb9u6_amd64.deb 8ab440219dddaa61d3b685ad3f0f24a124404a74 57950038 qemu-system-mips-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb aea392967c4197c98992c078919d58831a4d8d42 8962490 qemu-system-mips_2.8+dfsg-6+deb9u6_amd64.deb fee536a6eb7fcc46032d03c3183ad13d4504df99 151502114 qemu-system-misc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 95818b5aa3811d8da54155bac14f398deac06eb0 13496480 qemu-system-misc_2.8+dfsg-6+deb9u6_amd64.deb 9a14e7d61d36b93bd4e522b1522f15c5c41f4a0f 44812332 qemu-system-ppc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 03f727568931a00d3a5daed99e0fb27df03e95ef 7019984 qemu-system-ppc_2.8+dfsg-6+deb9u6_amd64.deb 8ea30296d32abe488c1ccfa3ffd867e3b6ea2a68 22554454 qemu-system-sparc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 50be06007fab989f6f19e3d93cfd432a1d8bc498 2563216 qemu-system-sparc_2.8+dfsg-6+deb9u6_amd64.deb 1eac62c66bd65e0d61250e540813e01ab586ca13 31983184 qemu-system-x86-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 772803be844ee27a273358333431cb0b5d295f61 4813772 qemu-system-x86_2.8+dfsg-6+deb9u6_amd64.deb 3a31d524cc645102abe2e6342fb942a2477a69cc 66338 qemu-system_2.8+dfsg-6+deb9u6_amd64.deb d1ac091a603170b3c08d04dadfa2fb77462698d9 2586 qemu-user-binfmt_2.8+dfsg-6+deb9u6_amd64.deb 9a0fa48884e8084628d9f58383bbce60f20465ae 80513486 qemu-user-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 5da926ed8972860cb28301f32d7531d812aebc6b 88271558 qemu-user-static-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 5161463256b7ad63db3dce7aa9b2d83cf4d0e129 8986204 qemu-user-static_2.8+dfsg-6+deb9u6_amd64.deb cc3be2b24b95f341acce95b8335a89cf0f3149c9 7944774 qemu-user_2.8+dfsg-6+deb9u6_amd64.deb bf4bf51f2f1287a6c7481d5b1e241c1c18700844 9751716 qemu-utils-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 2750d80d810430e4238dbd544f2c444b8c0d8330 986776 qemu-utils_2.8+dfsg-6+deb9u6_amd64.deb 88d5787387eda0f7319240ef6da758579c91cc3a 21719 qemu_2.8+dfsg-6+deb9u6_amd64.buildinfo 9fd088160149b70cee7bdf856c404d6159cda23e 151252 qemu_2.8+dfsg-6+deb9u6_amd64.deb Checksums-Sha256: 79668779e726058b93b9a0897fa009ba1774ad38c78257da297d0ec2a13dcc88 275988 qemu-block-extra-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 236268425bfcf26eec9f570a2dc411b69a1c865860df4d8159b143083d8178fd 105970 qemu-block-extra_2.8+dfsg-6+deb9u6_amd64.deb 7f1f96452cf24ed033bee6cc9d9680d60bc3cc73a3e5189caf6b93c45b4f303a 770872 qemu-guest-agent-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 8d5e4279ba3be0038d01176393f54a189cfebd0ae1d948063553adcabea6c5b0 315062 qemu-guest-agent_2.8+dfsg-6+deb9u6_amd64.deb 52ecb6c38b22527df200d603f8794324799183a094357b90f2b8d23209dd0d16 67284 qemu-kvm_2.8+dfsg-6+deb9u6_amd64.deb 627cc57c9146f8e6a11592dceeabe97cc03cf38f8f655611e7cb89734964511d 33553532 qemu-system-arm-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb f7d43f52ec9fc9d074f6e6526a7d129811aa5297ec53d5f484cd75cf55c032f5 5263404 qemu-system-arm_2.8+dfsg-6+deb9u6_amd64.deb 351519869dbfb3382d45f6ad7c920daa8fb05e578143e046b90c97b6a1d04b7e 329616 qemu-system-common-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 5a7245c5d78788351a44f901a7f9ac61b8cce567e9fbdb85298c1259c0d0b055 502548 qemu-system-common_2.8+dfsg-6+deb9u6_amd64.deb 724fbdf0cec84e52dd3447e78ce7c20e823c89f615c88c9f57f7af6756ba537f 57950038 qemu-system-mips-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 92d0e463e303a76982e3c1dd1164b4805e835f1770964e725e3fa02b3c2d09a9 8962490 qemu-system-mips_2.8+dfsg-6+deb9u6_amd64.deb 69e6de7315fd870462a8171c9b18620f416872083aa08c29e88cbb34b1130eca 151502114 qemu-system-misc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 76a12d6696378267ab1ca012492ae32bec2f6a9db1dda6c5f9c5422ccc102543 13496480 qemu-system-misc_2.8+dfsg-6+deb9u6_amd64.deb bd4d90bd43a65b96ebd2514e015ba0f3cf64e6cfb2d57067bafe82b69eb2af47 44812332 qemu-system-ppc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb ad1e1ca7d91d19e5dce29b15a25c9ba3d2648e13b928929d222b01b17186981a 7019984 qemu-system-ppc_2.8+dfsg-6+deb9u6_amd64.deb 903ea7d52ed9c1217676d91f3a2baf4a4d2faeceaca554a71706db6f7abfc53b 22554454 qemu-system-sparc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb a87cec25fbabecd5e7ddc12af073c99d22cb972bcf89aac6b2af77838b8bc311 2563216 qemu-system-sparc_2.8+dfsg-6+deb9u6_amd64.deb 4845f0ee77add138cab57c067081723cc300e768c8e9c89362a0d601ae10b414 31983184 qemu-system-x86-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb ec38de28d920e4306305f028d26a647a08742bc028bc3ee3318f4ac680860b63 4813772 qemu-system-x86_2.8+dfsg-6+deb9u6_amd64.deb b46092e9e0ea1cd258e1f8d477ee4bc7874de70fa040bd8503df91e58a453175 66338 qemu-system_2.8+dfsg-6+deb9u6_amd64.deb 58b98fa4e77ea87d5da6cb62ce57fbc5c9ba135d9e9a89e84107aea7d2c88af1 2586 qemu-user-binfmt_2.8+dfsg-6+deb9u6_amd64.deb 73e23c314fc1ec3b13e320c5a2be3025732dde8ac97b48cf8564d47dbd13a73c 80513486 qemu-user-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 9021f560a33e516b7093a06ae2dcfde03f9b0514c5a1e4c18cf155b626259954 88271558 qemu-user-static-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 316171f256b6de92a7e5c2ad7a161142117d3e8786a2192d709b40cb823340f1 8986204 qemu-user-static_2.8+dfsg-6+deb9u6_amd64.deb d71c86f959c047a624ff653026715c467088b24b1efe2c4c43c96a80dfe7702a 7944774 qemu-user_2.8+dfsg-6+deb9u6_amd64.deb 82ec4dc10368f4008f79ef0770cd9db4fba2881b1f85234f7bf75b339e510fdb 9751716 qemu-utils-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 1f646744d86a10fb5a34d2b3f0b0151f8182366a3f53f09382e78a238b85e383 986776 qemu-utils_2.8+dfsg-6+deb9u6_amd64.deb 2e401940f9f696eeea8442369a89e2e1cebedfdb811b43f3c79af8c2af70db4e 21719 qemu_2.8+dfsg-6+deb9u6_amd64.buildinfo a00ee8a9aa690e39a3140e5e740dc5cdb431a4591c7909d2ffc6aa76ded69885 151252 qemu_2.8+dfsg-6+deb9u6_amd64.deb Files: 26d317e8c3b58a8e1281a06a8b3fee18 275988 debug extra qemu-block-extra-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb dd14b9322e2c8fdbe48d68af5f0eaf4b 105970 otherosfs optional qemu-block-extra_2.8+dfsg-6+deb9u6_amd64.deb f22b83447a4f18d01c73279d6048ff05 770872 debug extra qemu-guest-agent-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 951118077354a597b349cafd0334997b 315062 otherosfs optional qemu-guest-agent_2.8+dfsg-6+deb9u6_amd64.deb 46b5db3a72551847abe1d5c3c677efa5 67284 otherosfs optional qemu-kvm_2.8+dfsg-6+deb9u6_amd64.deb 221a4980b37fa27e0d2fa36db31c6dd2 33553532 debug extra qemu-system-arm-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 5dc1632182822d16a1a4226b789e9898 5263404 otherosfs optional qemu-system-arm_2.8+dfsg-6+deb9u6_amd64.deb 2e8a08af7efd701b7902a343b6730638 329616 debug extra qemu-system-common-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb e386d7812b2e69a7d2a1e904a97edeba 502548 otherosfs optional qemu-system-common_2.8+dfsg-6+deb9u6_amd64.deb 3de5234f9feceb42767319348a5aeb87 57950038 debug extra qemu-system-mips-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 2cc6d232c384c4a52c0d43bb3eda378b 8962490 otherosfs optional qemu-system-mips_2.8+dfsg-6+deb9u6_amd64.deb 6c06b39602a4528c5830fd184d316891 151502114 debug extra qemu-system-misc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb f2c5935a701767998b24ceff95efb42f 13496480 otherosfs optional qemu-system-misc_2.8+dfsg-6+deb9u6_amd64.deb 30710e34eaeb906f12b1cb2c943c5154 44812332 debug extra qemu-system-ppc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb ad0169dfaf4c8db54533230c0ae886e3 7019984 otherosfs optional qemu-system-ppc_2.8+dfsg-6+deb9u6_amd64.deb 38e2238e89d5a728e4fc267e29aae56f 22554454 debug extra qemu-system-sparc-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb 06db184bdc6955cfcbf498f3ddd6ad95 2563216 otherosfs optional qemu-system-sparc_2.8+dfsg-6+deb9u6_amd64.deb 5c47f5f96cda86392dece067286d1fa8 31983184 debug extra qemu-system-x86-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb f58c0a4088952e132558b67a6ceee618 4813772 otherosfs optional qemu-system-x86_2.8+dfsg-6+deb9u6_amd64.deb 66264f191c9f48dcfc1b5e1a0a2f1685 66338 otherosfs optional qemu-system_2.8+dfsg-6+deb9u6_amd64.deb e48bc51c8d1d9f7f00e48f481dd1db5f 2586 otherosfs optional qemu-user-binfmt_2.8+dfsg-6+deb9u6_amd64.deb 2a32198a1d7ae7be5628b3e8d8a1a06d 80513486 debug extra qemu-user-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb c092501c83bca522e3e736b784f3e99f 88271558 debug extra qemu-user-static-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb aa50043fcb2db77a22be2cd6433748c3 8986204 otherosfs optional qemu-user-static_2.8+dfsg-6+deb9u6_amd64.deb 7de50d01398d2853489e4fabfde6e028 7944774 otherosfs optional qemu-user_2.8+dfsg-6+deb9u6_amd64.deb cc4b4ed12161db315219268db1d42c5a 9751716 debug extra qemu-utils-dbgsym_2.8+dfsg-6+deb9u6_amd64.deb ca28426d1a26a894db47b1703dd639ca 986776 otherosfs optional qemu-utils_2.8+dfsg-6+deb9u6_amd64.deb cb5f12a1b0d5cdf132e2d5cb8327730e 21719 otherosfs optional qemu_2.8+dfsg-6+deb9u6_amd64.buildinfo 7d3b7d96d5b104cd450455cc18bebad6 151252 otherosfs optional qemu_2.8+dfsg-6+deb9u6_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc1Y9tvYCx8z2wuljZWBroU7DAFMFAlzuwnsACgkQZWBroU7D AFO97g//UwX0mCYmOVZ8087u9TVrLeLM0T9j8emjdShRnfOclUbqOZF7ztedRcYB JCHvdtK1Ij6IrzZicpKgQ00n1g1fuctDy+pasmG/GCzqsfe6VZ33mOoRxyTPJ6af rEmhNXrmkXLZuId37otiBr/Gglp+bX1FBvKz0I7lMBiLpnePsQGeMu3KaYuNN7/L tnkSRITZ8A+C4EKwVLZ0mxfv6LYHF4nMdyY/noHEfBUUUazWQ3KquMjvyJCAUWjr GpFFF6FzJOaGbSPoOErGCIH21j1F6rOikRoLKOWXckKTooPhuSfNBkZ2EQXzQPxH ijhJtXbiMO+0c1IOZ2hszEGXQufOp2t0M8RV+atMQOTS5ncXPf2HBHMX5vQJ+crK 0RaeBgazA4HKdbxFc5t5nl1XbXoqT8+2Fqlv0MOeaM7n2DltThWypoEc7wz7ExHu 4QorCWQ6PVgf5S5SkqVlm8eutln4d2nRAIW2of/VOSI4F4g23l7Cltwn9PmN9n5E UQnQkb48OGIoPXNNF06tRCNa3IyCtaZ+I+7tBg3Aa2Q5R5+bTmze82Kh1FiIW73h r8NlJtWPNSKAAXJ7/bz3GR21f0ruTFL4lYLUkTBZfsHz+XB4jdzicWODXLSfu54Q lDkyT8l98t6/Hpn//u2fiRWsSOTgvjvhsreeWPa7lPtUR+9IWfs= =nRC7 -----END PGP SIGNATURE-----