Publishing details

Published on 2016-11-09
Copied from ubuntu precise in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

qemu-kvm (1.0+noroms-0ubuntu14.31) precise-security; urgency=medium

  * SECURITY UPDATE: DoS via unbounded memory allocation
    - debian/patches/CVE-2016-5403.patch: re-enable original patch.
    - debian/patches/CVE-2016-5403-2.patch: recalculate vq->inuse after
      migration in hw/virtio.c.
    - debian/patches/CVE-2016-5403-3.patch: decrement vq->inuse in
      virtqueue_discard() in hw/virtio.c.
    - debian/patches/CVE-2016-5403-4.patch: zero vq->inuse in
      virtio_reset() in hw/virtio.c.
    - CVE-2016-5403
  * SECURITY UPDATE: directory traversal flaw in 9p virtio backend
    - debian/patches/CVE-2016-7116-1.patch: forbid illegal path names in
      hw/9pfs/virtio-9p.c.
    - debian/patches/CVE-2016-7116-2.patch: forbid . and .. in file names
      in hw/9pfs/virtio-9p.c.
    - debian/patches/CVE-2016-7116-3.patch: handle walk of ".." in the root
      directory in hw/9pfs/virtio-9p.*.
    - debian/patches/CVE-2016-7116-4.patch: fix potential segfault during
      walk in hw/9pfs/virtio-9p.c.
    - CVE-2016-7116
  * SECURITY UPDATE: buffer overflow in xlnx.xps-ethernetlite
    - debian/patches/CVE-2016-7161.patch: fix a heap overflow in
      hw/xilinx_ethlite.c.
    - CVE-2016-7161
  * SECURITY UPDATE: OOB stack memory access in vmware_vga
    - debian/patches/CVE-2016-7170.patch: correct bitmap and pixmap size
      checks in hw/vmware_vga.c.
    - CVE-2016-7170
  * SECURITY UPDATE: denial of service in mcf via invalid count
    - debian/patches/CVE-2016-7908.patch: limit buffer descriptor count in
      hw/mcf_fec.c.
    - CVE-2016-7908
  * SECURITY UPDATE: denial of service in pcnet via invalid length
    - debian/patches/CVE-2016-7909.patch: check rx/tx descriptor ring
      length in hw/pcnet.c.
    - CVE-2016-7909
  * SECURITY UPDATE: infinite loop in Intel HDA controller
    - debian/patches/CVE-2016-8909.patch: check stream entry count during
      transfer in hw/intel-hda.c.
    - CVE-2016-8909
  * SECURITY UPDATE: infinite loop in RTL8139 ethernet controller
    - debian/patches/CVE-2016-8910.patch: limit processing of ring
      descriptors in hw/rtl8139.c.
    - CVE-2016-8910
  * SECURITY UPDATE: memory leakage at device unplug in eepro100
    - debian/patches/CVE-2016-9101.patch: fix memory leak in device uninit
      in hw/eepro100.c.
    - CVE-2016-9101
  * SECURITY UPDATE: denial of service via memory leak in 9pfs
    - debian/patches/CVE-2016-9102.patch: fix memory leak in
      v9fs_xattrcreate in hw/9pfs/virtio-9p.c.
    - CVE-2016-9102
  * SECURITY UPDATE: information leakage via xattribute in 9pfs
    - debian/patches/CVE-2016-9103.patch: fix information leak in xattr
      read in hw/9pfs/virtio-9p.c.
    - CVE-2016-9103
  * SECURITY UPDATE: integer overflow leading to OOB access in 9pfs
    - debian/patches/CVE-2016-9104.patch: fix integer overflow issue in
      xattr read/write in hw/9pfs/virtio-9p.c.
    - CVE-2016-9104
  * SECURITY UPDATE: denial of service via memory leakage in 9pfs
    - debian/patches/CVE-2016-9105.patch: fix memory leak in v9fs_link in
      hw/9pfs/virtio-9p.c.
    - CVE-2016-9105

 -- Marc Deslauriers <email address hidden>  Tue, 08 Nov 2016 08:16:37 -0500

Available diffs

diff from 1.0+noroms-0ubuntu14.30 to 1.0+noroms-0ubuntu14.31 (11.3 KiB)

Builds

Built packages

kvm dummy transitional package from kvm to qemu-kvm

qemu dummy transitional package from qemu to qemu-kvm

qemu-common qemu common functionality (bios, documentation, etc)

qemu-kvm Full virtualization on i386 and amd64 hardware

qemu-kvm-dbgsym debug symbols for package qemu-kvm

qemu-utils qemu utilities

qemu-utils-dbgsym debug symbols for package qemu-utils

Package files

kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.31_amd64.deb (3.2 KiB)
kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.31_armel.deb (3.2 KiB)
kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.31_armhf.deb (3.1 KiB)
kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.31_i386.deb (3.2 KiB)
kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.31_powerpc.deb (3.2 KiB)
qemu-common_1.0+noroms-0ubuntu14.31_all.deb (22.8 KiB)
qemu-kvm-dbgsym_1.0+noroms-0ubuntu14.31_amd64.ddeb (6.2 MiB)
qemu-kvm-dbgsym_1.0+noroms-0ubuntu14.31_armel.ddeb (3.6 MiB)
qemu-kvm-dbgsym_1.0+noroms-0ubuntu14.31_armhf.ddeb (3.6 MiB)
qemu-kvm-dbgsym_1.0+noroms-0ubuntu14.31_i386.ddeb (6.0 MiB)
qemu-kvm-dbgsym_1.0+noroms-0ubuntu14.31_powerpc.ddeb (6.0 MiB)
qemu-kvm_1.0+noroms-0ubuntu14.31.diff.gz (155.4 KiB)
qemu-kvm_1.0+noroms-0ubuntu14.31.dsc (2.2 KiB)
qemu-kvm_1.0+noroms-0ubuntu14.31_amd64.deb (3.4 MiB)
qemu-kvm_1.0+noroms-0ubuntu14.31_armel.deb (3.1 MiB)
qemu-kvm_1.0+noroms-0ubuntu14.31_armhf.deb (3.1 MiB)
qemu-kvm_1.0+noroms-0ubuntu14.31_i386.deb (3.5 MiB)
qemu-kvm_1.0+noroms-0ubuntu14.31_powerpc.deb (3.4 MiB)
qemu-kvm_1.0+noroms.orig.tar.gz (4.7 MiB)
qemu-utils-dbgsym_1.0+noroms-0ubuntu14.31_amd64.ddeb (409.5 KiB)
qemu-utils-dbgsym_1.0+noroms-0ubuntu14.31_armel.ddeb (280.8 KiB)
qemu-utils-dbgsym_1.0+noroms-0ubuntu14.31_armhf.ddeb (281.9 KiB)
qemu-utils-dbgsym_1.0+noroms-0ubuntu14.31_i386.ddeb (397.2 KiB)
qemu-utils-dbgsym_1.0+noroms-0ubuntu14.31_powerpc.ddeb (384.8 KiB)
qemu-utils_1.0+noroms-0ubuntu14.31_amd64.deb (348.4 KiB)
qemu-utils_1.0+noroms-0ubuntu14.31_armel.deb (312.6 KiB)
qemu-utils_1.0+noroms-0ubuntu14.31_armhf.deb (312.7 KiB)
qemu-utils_1.0+noroms-0ubuntu14.31_i386.deb (377.4 KiB)
qemu-utils_1.0+noroms-0ubuntu14.31_powerpc.deb (366.8 KiB)
qemu_1.0+noroms-0ubuntu14.31_amd64.deb (2.6 KiB)
qemu_1.0+noroms-0ubuntu14.31_armel.deb (2.6 KiB)
qemu_1.0+noroms-0ubuntu14.31_armhf.deb (2.6 KiB)
qemu_1.0+noroms-0ubuntu14.31_i386.deb (2.6 KiB)
qemu_1.0+noroms-0ubuntu14.31_powerpc.deb (2.6 KiB)