Control: tags -1 + confirmed On Tue, 2023-07-11 at 23:18 +0300, Michael Tokarev wrote: > 2 upstream stable/bugfix releases of qemu 7.2 series has been > releases since the version of qemu in bookworm, - 7.2.3 and 7.2.4, > with a good set of fixes each. See > https://salsa.debian.org/qemu-team/qemu/-/commits/stable-7.2/ > for the stable-7.2 branch mirrored on salsa.d.o, or on gitlab.com. > There are many fixes in there, some of which already affected > debin users and even debian infrastructure (like qemu-based buildds). > > Many various crashes has been fixed too, including some which can > cauese data corruption in some cases (an unexpected crash of qemu > with not all guest data written to permanent storage). > > Among the changes there's 2 security fixe too, CVE-2023-0330 > (LSI controller reentrancy issue) and CVE-2023-2861 (opening > special files in 9pfs). > > I believe every bit of this is worth having in debian stable. > > Besides that, there's one debian-specific bug being fixed by this > release, - when I split out xen-specifx bits into a separate > package, I forgot to enable USB devices support. This update > re-enables usb support for Xen HVM domUs again (#1037341). >
Please go ahead. Regards, Adam
