Your message dated Wed, 21 Jul 2021 17:03:35 +0000
with message-id <[email protected]>
and subject line Bug#984455: fixed in qemu 1:6.0+dfsg-2exp
has caused the Debian Bug report #984455,
regarding CVE-2020-35505
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
984455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=984455
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: qemu
Severity: normal
Tags: security
X-Debbugs-Cc: Debian Security Team <[email protected]>
This was assigned CVE-2020-35505:
https://bugzilla.redhat.com/show_bug.cgi?id=1909769
https://bugs.launchpad.net/qemu/+bug/1910723 (reproducer)
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: qemu
Source-Version: 1:6.0+dfsg-2exp
Done: Michael Tokarev <[email protected]>
We believe that the bug you reported is fixed in the latest version of
qemu, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <[email protected]> (supplier of updated qemu package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 21 Jul 2021 19:43:37 +0300
Source: qemu
Architecture: source
Version: 1:6.0+dfsg-2exp
Distribution: experimental
Urgency: medium
Maintainer: Debian QEMU Team <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Closes: 979679 984454 984455 988157 990563 990564 990565
Changes:
qemu (1:6.0+dfsg-2exp) experimental; urgency=medium
.
[ Christian Ehrhardt ]
* qemu 6.0 broke libvirt <7.2, add a Breaks
to avoid partial upgrade issues (LP: #1932264)
* enable SDL as secondary UI backend (LP: #1256185)
* clear all (current and former) modules on purge
* only save modules if /run/qemu isn't noexec
* provide run-qemu.mount in qemu-block-extra
(disabled in debian for now)
* Disable capstone disassembler library support in ubuntu (universe)
.
[ Michael Tokarev ]
* qemu does not ship Changelog file anymore
* drop version from libfuse-dev build-depends (noticed by Ville Skyttä)
* a few patches from upstream stable:
- target-ppc-fix-load-endianness-for-lxvwsx-lxvdsx.patch
fix various crashes in ppc system emulation.
Thanks to Christian Ehrhardt for pointing this out
- pvrdma-fix-possible-mremap-overflow-in-pvrdma-device-CVE-2021-3582.patch
(Closes: #990565, CVE-2021-3582)
- pvrdma-ensure-correct-input-on-ring-init-CVE-2021-3607.patch
(Closes: #990564, CVE-2021-3607)
- pvrdma-fix-the-ring-init-error-flow-CVE-2021-3608.patch
(Closes: #990563, CVE-2021-3608)
- usb-limit-combined-packets-to-1-MiB-CVE-2021-3527.patch
usb-redir-avoid-dynamic-stack-allocation-CVE-2021-3527.patch
(Closes: #988157, CVE-2021-3527)
* mention closing of 3 bugs in am53c974 (ESP) device emulation by 6.0
(Closes: #979679, CVE-2020-35504)
(Closes: #984455, CVE-2020-35505)
(Closes: #984454, CVE-2020-35506)
* make fuse debian-only, since libfuse3 in ubuntu is in universe
* fix microvm default machine type for a new build system (LP: #1936894)
Checksums-Sha1:
fe2253b6be68a41504f3e31341dd29d4559a7bd5 6634 qemu_6.0+dfsg-2exp.dsc
ad9b698375bfcebf06fcb5bb62efe4960baeb241 95676 qemu_6.0+dfsg-2exp.debian.tar.xz
505379c47b1786a4921d039e236a54be2ea014eb 9601
qemu_6.0+dfsg-2exp_source.buildinfo
Checksums-Sha256:
b22f01dd13e9b4dbe27803e461ed05cc30011868c606b55c32d0101a081a158c 6634
qemu_6.0+dfsg-2exp.dsc
cec0a22ed4d95c1ae94481f8efd7eee64c92ec487775e30af00cf52d42884351 95676
qemu_6.0+dfsg-2exp.debian.tar.xz
ce60ee71c70715cc4d314bc522ad6eca533aa0f2eaa594532236738920fdfac1 9601
qemu_6.0+dfsg-2exp_source.buildinfo
Files:
ff721efc5a7e2c4f6a4dbb58f744dca0 6634 otherosfs optional qemu_6.0+dfsg-2exp.dsc
0f3531169080d6f4b341965cdf44df82 95676 otherosfs optional
qemu_6.0+dfsg-2exp.debian.tar.xz
4b849195b7c326ebaa105c0c50293fac 9601 otherosfs optional
qemu_6.0+dfsg-2exp_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmD4UP8PHG1qdEB0bHMu
bXNrLnJ1AAoJEHAbT2saaT5ZFDcH+waRvEe8DKg2zVlNl1EWdgVnzMQZm0MUqrSx
AfJs9iXWvLdWHbWwvALH1h02DkOsR5Fu9grayHP6Y7R5MkcF6ZsNCg/rYAbmLv70
xSnzwfrmGhGC8ymXkuOvfqgf5I6mS9efNvvifa5VNs/a6zO7fcm6ZLaw3zZdMlTn
akd9Ug7I0CIaYJ/QYkEPsJ5WVK+Yq6tay/w4VyS7HLDWSFTzQQMRbX2DbgU0oGEx
BOM9jv2Z1H2vjAfGsPNPl1lOwhEYz9Na0vBHINprNc0bpOsqLXWR9DXR6IypDyG/
AUKKgmO9iFF/xoSq7kbcR3m71v6XiXUj10rFRHRL43G+rOFspwk=
=nV6A
-----END PGP SIGNATURE-----
--- End Message ---
