-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Dec 2025 09:10:19 +0300 Source: qemu Binary: qemu-system-data Architecture: all Version: 1:7.2+dfsg-7+deb12u18 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Michael Tokarev Description: qemu-system-data - QEMU full system emulation (data files) Closes: 1117153 Changes: qemu (1:7.2+dfsg-7+deb12u18) bookworm; urgency=medium . * v7.2.22: - Update version for 7.2.22 release - hw/misc/npcm_clk: Don't divide by zero when calculating frequency - hw/display/xlnx_dp: Don't abort for unsupported graphics formats - hw/display/xlnx_dp.c: Don't abort on AUX FIFO overrun/underrun - net: pad packets to minimum length in qemu_receive_packet() - hw/net/e1000e_core: Adjust e1000e_write_payload_frag_to_rx_buffers() assert - hw/net/e1000e_core: Correct rx oversize packet checks - hw/net/e1000e_core: Don't advance desc_offset for NULL buffer RX descriptors - qio: Protect NetListener callback with mutex - qio: Remember context of qio_net_listener_set_client_func_full - qio: Unwatch before notify in QIONetListener - qio: Add trace points to net_listener - block/curl.c: Fix CURLOPT_VERBOSE parameter type - block/curl.c: Use explicit long constants in curl_easy_setopt calls - crypto: stop requiring "key encipherment" usage in x509 certs - io: fix use after free in websocket handshake code Closes: #1117153, CVE-2025-11234 (UAF in websocket handshake code) - io: move websock resource release to close method - io: release active GSource in TLS channel finalizer - io: add trace event when cancelling TLS handshake - linux-user: permit sendto() with NULL buf and 0 len - linux-user: Use correct type for FIBMAP and FIGETBSZ emulation - target/i386: user: do not set up a valid LDT on reset - async: access bottom half flags with qatomic_read - i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit - i386/cpu: Prevent delivering SIPI during SMM in TCG mode - target/i386: Fix CR2 handling for non-canonical addresses * v7.2.21: - Update version for 7.2.21 release - ui/icons/qemu.svg: Add metadata information (author, license) to the logo - hw/usb/hcd-uhci: don't assert for SETUP to non-0 endpoint - tests/tcg/multiarch: Add tb-link test - accel/tcg: Properly unlink a TB linked to itself - multiboot: Fix the split lock - python/qemu/machine: use socketpair() for QMP by default - python/qmp/legacy: make QEMUMonitorProtocol accept a socket - python/qmp/protocol: add open_with_socket() - python/machine: Fix AF_UNIX path too long on macOS - use fedora:37 for python container instead of :latest - hw/usb/network: Remove hardcoded 0x40 prefix in STRING_ETHADDR response - tests: Ensure TAP version is printed before other messages - tests/qtest: Do not run lsi53c895a test if device is not present - Revert "tests/qtest: use qos_printf instead of g_test_message" - vhost-user-test: no set non-blocking for cal fd less than 0. - tests: vhost-user-test: release mutex on protocol violation - .gitmodules: move u-boot mirrors to qemu-project-mirrors - hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT Checksums-Sha1: 8dbbc733a9105d0e22db200d3317089ec878cde9 1297476 qemu-system-data_7.2+dfsg-7+deb12u18_all.deb 837bdbd48e4d52458e14af7da187cb4e3195731b 25371 qemu_7.2+dfsg-7+deb12u18_all-buildd.buildinfo Checksums-Sha256: 8d7647370573fe9871949acf60d0c000546c2c089008a70accb3d015781e6bf1 1297476 qemu-system-data_7.2+dfsg-7+deb12u18_all.deb fffd546f9146af752d35d259b3f1130fa071a63c793f68327a7a1cc0f18d065b 25371 qemu_7.2+dfsg-7+deb12u18_all-buildd.buildinfo Files: ad8787051fb014f51bb740e788e65936 1297476 otherosfs optional qemu-system-data_7.2+dfsg-7+deb12u18_all.deb 6b48af0e6c480997d186f19c889481d3 25371 otherosfs optional qemu_7.2+dfsg-7+deb12u18_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmlW8hsACgkQJm69HxMT N+pMkRAAgTQICoHa51PHqcjP3/k1Vf5Qy/DTYgUZjHlMuEi4eXsTmG42q10BPQIM 8x74XbjYUhjL19tzbUOhsV16WU9T8jSItxGd0V9gF6eAxEI2graHSJCJ1NYReI8s jPyhT7hl0Vqy4XlhnqVubPX+7Jf+yIWwMhJAMoBdFIzyNZIPO72l31/lAvUKC2Pu 1eWKhmAJO6/xiON0+jLVt7vgVcoXMsA/04JN23skY8iafXw4DDZY0E9wXgeGgDAy PUzdRIWAB43lQ05P9WnwlLgurtSB3A6wcphTYwbbyIVpcDAuzNSDlp/ePI4TT5Ui +SMYsxth9d6zi4392z4lpKpsJFvXNVC/d8A/fCYFg3KT3+TY1RZT5c9c5m3QwmvG tfsZ79lNI3vo3yvkYM5adRxOGEvYT7vZoxAX0WPaNIKJTdW7qje8oddPQNPRM3qL ryILzOvE/xIE2Elm5FU9A2wcm4TApvZ3X10Bpvc4lMpu7MZGlmE83XvZ742xpfPM XgGpMTIk9sc6HRNre8a2DYAQywjhhEca5x3zJhC9TNMS6WHgPg1UoiHy6tjcZe7+ JeqxNeT9YArpnoHcT3VdH0zZqT0NxDRBlX+V2BibSK4s8I3bb5aUCyU/lRueV+gE rv19mw0t6maaGR2CZpKRwvGM+XkGr8L21Y71CrEqcpxe8Tg6kCg= =eSQD -----END PGP SIGNATURE-----