qemu-kvm 0.12.5+noroms-0ubuntu7.5 source package in Ubuntu

Changelog

qemu-kvm (0.12.5+noroms-0ubuntu7.5) maverick-security; urgency=low

  * SECURITY UPDATE: fix heap buffer overflow from unaligned requests
    - virtio-blk-fail-unaligned-access-CVE-2011-1750-52c050236e.diff:
      patch from Debian
    - CVE-2011-1750
  * SECURITY UPDATE: verify no_hotplug attribute when handling hot-unplug
    requests
    - CVE-2011-1751-prep-pci-cleanly-backout-of-pci_qdev_init-925fe64ae7.diff:
      Moving common code to a separate function and using it from another
      place to fix a memory leak. Backported by Debian
    - CVE-2011-1751-prep-hotplug-0-acpi_piix4-qdevfy-e8ec0571e1.diff: This
      qdevifies acpi_piix4 device. Backported by Debian
    - CVE-2011-1751-prep-hotplug-1-pci-allow-devices-being-tagged-as-not-hotpluggable-180c22e18b.diff:
      Introduce a "no_hotplug" attribute and check it in common places
      to ensure such devices wont be hot-(un)plugged. This needs the
      pci-cleanly-backout-of-pci_qdev_init patch mentioned above. Backported
      by Debian
    - CVE-2011-1751-prep-hotplug-2-piix-tag-as-not-hotpluggable-0965f12da6.diff:
      Backported by Debian
    - CVE-2011-1751-prep-hotplug-3-vga-tag-as-not-hotplugable-be92bbf73d.diff:
      Mark certain devices as non-hotpluggable. Backported by Debian
    - CVE-2011-1751-hotplug-4-ignore-pci-hotplug-requests-for-unpluggable-devices.diff:
      Verifies the no_hotplug attribute when handling hot-unplug request from
      guest. Backported by Debian
 -- Jamie Strandboge <email address hidden>   Sun, 29 May 2011 08:22:56 -0500