A qemu security update has been released for Debian GNU/Linux 8 LTS to address two out-of-bounds heap buffer accesses.

Package : qemu
Version : 1:2.1+dfsg-12+deb8u14
CVE ID : CVE-2020-1711 CVE-2020-8608

Two out-of-bounds heap buffer accesses were found in QEMU, a fast
processor emulator, which could result in denial of service or
abitrary code execution.

For Debian 8 "Jessie", these problems have been fixed in version
1:2.1+dfsg-12+deb8u14.

We recommend that you upgrade your qemu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at:   https://wiki.debian.org/LTS