From a git bisect, I've narrowed it down to this commit:
https://github.com/qemu/qemu/commit/5d971f9e672507210e77d020d89e0e89165c8fc9
which in terms of debian patches is:
+revert-memory-accept-mismatching-sizes-in-memory_region_access_valid-CVE-2020-13754.patch
Reported upstream: https://bugs.launchpad.net/qemu/+bug/1886318
Not sure how I'd build a new deb minus that patch, would i need to build
all of these again:
qemu
qemu-block-extra
qemu-efi-aarch64
qemu-efi-arm
qemu-kvm
qemu-system
qemu-system-arm
qemu-system-common
qemu-system-data
qemu-system-gui
qemu-system-mips
qemu-system-misc
qemu-system-ppc
qemu-system-sparc
qemu-system-x86
qemu-utils
?
--
Simon John