> Thank you. I have added both qemu and xen to dla-needed now. I did not send
> the regular email about xen and qemu update as I remember that Credativ
> usually do this kind of update (right?).
As far as I am aware, not for qemu/qemu-kvm. And, it looks like there
are no open CVEs for qemu/qemu-kvm currently[0]. :)
[0] https://security-tracker.debian.org/tracker/source- package/qemu