Bug#1123030: bookworm-pu: package qemu/1:7.2+dfsg-7+deb12u18
Control: tags -1 + confirmed
On Tue, 2025-12-16 at 09:26 +0300, Michael Tokarev wrote:
> There are 2 new upstream stable/bugfix releases in the
> 7.2.x LTS branch. The number of fixes this time is
> relatively small, and many of them are to the testsuite,
> in an attempt to keep tests running.
>
> Among other things, this fixes two security issues:
> #1119917, CVE-2025-12464 (buffer overflow in e1000_receive_iov)
> #1117153, CVE-2025-11234 (UAF in websocket handshake code)
(Apparently only actually one, based on the later discussion.)
Please go ahead.
Regards,
Adam
Reply to: