qemu (1:2.2+dfsg-5expubuntu9.2) vivid-security; urgency=medium
* SECURITY UPDATE: heap overflow in PCNET controller
- debian/patches/CVE-2015-3209.patch: check bounds in hw/net/pcnet.c.
- CVE-2015-3209
* SECURITY UPDATE: unsafe /tmp filename use by slirp
- debian/patches/CVE-2015-4037.patch: use mkdtemp in net/slirp.c.
- CVE-2015-4037
* SECURITY UPDATE: denial of service via MSI message data field write
- debian/patches/CVE-2015-4103.patch: properly gate writes in
hw/xen/xen_pt.c, hw/xen/xen_pt.h, hw/xen/xen_pt_config_init.c.
- CVE-2015-4103
* SECURITY UPDATE: denial of service via MSI mask bits access
- debian/patches/CVE-2015-4104.patch: don't allow guest access in
hw/pci/msi.c, hw/xen/xen_pt_config_init.c, include/hw/pci/pci_regs.h.
- CVE-2015-4104
* SECURITY UPDATE: denial of service via PCI MSI-X pass-through error
message logging
- debian/patches/CVE-2015-4105.patch: limit messages in
hw/xen/xen_pt.h, hw/xen/xen_pt_msi.c.
- CVE-2015-4105
* SECURITY UPDATE: denial of service or possible privilege escalation via
write access to PCI config space
- debian/patches/CVE-2015-4106-*.patch: multiple upstream commits to
restrict passthough in hw/xen/xen_pt_config_init.c, hw/xen/xen_pt.h,
hw/xen/xen_pt.c.
- CVE-2015-4106
Date: 2015-06-09 15:05:13.526978+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/+source/qemu/1:2.2+dfsg-5expubuntu9.2
Sorry, changesfile not available.
--
Vivid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/vivid-changes
