Control: found -1
06.07.2024 00:35, Salvatore Bonaccorso wrote:
..
This is fixed by qemu uploaded earlier today.

Patches are already prepared for bookworm (for qemu 7.2.x series) and
already verified upstream and passed the tests.

Yes thanks, had only the 1:8.2.5+ds-2 initially to check.

Sure, you didn't know I uploaded a fixed version already.

Updated the security-tracker accordingly now.

Now, I've some doubts about what to do here with other branches.

For bookworm we've two choices: to upload a quick fix to -security
with just the two changes from upstream, or to wait for upstream
7.2.13 version which will be released in 10 days, and push that
one with this and other fixes.  I prefer the second variant, but
you definitely have your word here.

And since this bug is old (can't find when the json thing first
appeared, but it looks like it predates buster).  I'll update the
bug report at least.

Thanks,

/mjt

--
GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24.
New key: rsa4096/61AD3D98ECDF2C8E  9D8B E14E 3F2A 9DD7 9199  28F1 61AD 3D98 
ECDF 2C8E
Old key: rsa2048/457CE0A0804465C5  6EE1 95D1 886E 8FFB 810D  4324 457C E0A0 
8044 65C5
Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt

Reply via email to