qemu 1:2.5+dfsg-5ubuntu10.22 source package in Ubuntu

Changelog

qemu (1:2.5+dfsg-5ubuntu10.22) xenial-security; urgency=medium

  * SECURITY UPDATE: DoS via guest ram block area
    - debian/patches/CVE-2017-11334-1.patch: use qemu_ram_ptr_length to
      access guest ram in exec.c.
    - debian/patches/CVE-2017-11334-2.patch: add lock parameter to
      qemu_ram_ptr_length in exec.c.
    - CVE-2017-11334
  * SECURITY UPDATE: code execution via multiboot out-of-bounds write
    - debian/patches/CVE-2017-14167.patch: validate multiboot header
      address values in hw/i386/multiboot.c.
    - CVE-2017-14167
  * SECURITY UPDATE: information disclosure via race in 9pfs
    - debian/patches/CVE-2017-15038.patch: use g_malloc0 to allocate space
      for xattr in hw/9pfs/virtio-9p.c.
    - CVE-2017-15038
  * SECURITY UPDATE: DoS via large option request in NBD server
    - debian/patches/CVE-2017-15119.patch: reject options larger than 32M
      in nbd.c.
    - CVE-2017-15119
  * SECURITY UPDATE: DoS in cirrus driver
    - debian/patches/CVE-2017-15289.patch: fix oob access in mode4and5
      write functions in hw/display/cirrus_vga.c.
    - CVE-2017-15289
  * SECURITY UPDATE: out-of-bounds access in ps2 driver
    - debian/patches/CVE-2017-16845.patch: check PS2Queue pointers in
      post_load routine in hw/input/ps2.c.
    - CVE-2017-16845
  * SECURITY UPDATE: DoS in Virtio Vring implementation
    - debian/patches/CVE-2017-17381.patch: check VirtQueue Vring object is
      set in hw/virtio/virtio.c.
    - CVE-2017-17381
  * SECURITY UPDATE: DoS via integer overflow in ROUND_UP
    - debian/patches/CVE-2017-18043.patch: fix ROUND_UP in
      include/qemu/osdep.h.
    - CVE-2017-18043
  * SECURITY UPDATE: DoS in VGA driver
    - debian/patches/CVE-2018-5683.patch: check the validation of memory
      addr when draw text in hw/display/vga.c.
    - CVE-2018-5683

 -- Marc Deslauriers <email address hidden>  Thu, 15 Feb 2018 09:48:27 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2018-02-15
Uploaded to:
Xenial
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
otherosfs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
qemu_2.5+dfsg.orig.tar.xz 5.6 MiB 7507dc37281ac7a42e13fff062a88e8742734d42fad2b6c2aeb6cc96060b120a
qemu_2.5+dfsg-5ubuntu10.22.debian.tar.xz 194.6 KiB 2ff618163762d2927416018d6eef5364b9d22a9fa4f35f89620193b892417e96
qemu_2.5+dfsg-5ubuntu10.22.dsc 6.1 KiB 4e0dc8e76c5cc5224d710ecc537d7a6dbf45e5aab4deb7fcabb1fe536c966619

View changes file

Binary packages built by this source

qemu: fast processor emulator

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs. QEMU has
 two operating modes:
 .
  * User mode emulation: QEMU can launch Linux processes compiled for
    one CPU on another CPU.
  * Full system emulation: QEMU emulates a full system, including a
    processor and various peripherals. It enables easier testing and
    debugging of system code. It can also be used to provide virtual
    hosting of several virtual machines on a single server.
 .
 As QEMU requires no host kernel patches to run, it is very safe and
 easy to use.
 .
 This package is a metapackage depending on all qemu-related packages.

qemu-block-extra: extra block backend modules for qemu-system and qemu-utils

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides extra block device backend modules for qemu-system
 emulation and qemu-img from qemu-utils package, which are rarely used and
 has extra dependencies.

qemu-block-extra-dbgsym: debug symbols for package qemu-block-extra

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides extra block device backend modules for qemu-system
 emulation and qemu-img from qemu-utils package, which are rarely used and
 has extra dependencies.

qemu-guest-agent: Guest-side qemu-system agent

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides a daemon (agent) to run inside qemu-system
 guests (full system emulation). It communicates with the host using
 a virtio-serial channel org.qemu.guest_agent.0, and allows one to perform
 some functions in the guest from the host, including:
  - querying and setting guest system time
  - performing guest filesystem sync operation
  - initiating guest shutdown or suspend to ram
  - accessing guest files
  - freezing/thawing guest filesystem operations
  - others.
 .
 Install this package on a system which is running as guest inside
 qemu virtual machine. It is not used on the host.

qemu-guest-agent-dbgsym: debug symbols for package qemu-guest-agent

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides a daemon (agent) to run inside qemu-system
 guests (full system emulation). It communicates with the host using
 a virtio-serial channel org.qemu.guest_agent.0, and allows one to perform
 some functions in the guest from the host, including:
  - querying and setting guest system time
  - performing guest filesystem sync operation
  - initiating guest shutdown or suspend to ram
  - accessing guest files
  - freezing/thawing guest filesystem operations
  - others.
 .
 Install this package on a system which is running as guest inside
 qemu virtual machine. It is not used on the host.

qemu-kvm: QEMU Full virtualization

 QEMU is a fast processor emulator. This package depends on the
 appropriate qemu-system-$arch to enable KVM to be run. It also
 includes a script /usr/bin/kvm which runs the appropriate
 qemu-system-$arch in kvm mode.
 .
 Please note that old qemu-kvm configuration files (in /etc/kvm/) are
 no longer used.

qemu-system: QEMU full system emulation binaries

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This metapackage provides the full system emulation binaries for all supported
 targets, by depending on all per-architecture system emulation packages which
 QEMU supports.

qemu-system-aarch64: QEMU full system emulation binaries (aarch64)

 QEMU is a fast processor emulator: currently the package supports
 ARM emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This is a transition package as qemu-system-aarch64 has been moved into
 qemu-system-arm.

qemu-system-arm: QEMU full system emulation binaries (arm)

 QEMU is a fast processor emulator: currently the package supports
 ARM emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following arm hardware: aarch64 arm.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-arm-dbgsym: debug symbols for package qemu-system-arm

 QEMU is a fast processor emulator: currently the package supports
 ARM emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following arm hardware: aarch64 arm.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-common: QEMU full system emulation binaries (common files)

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides common files needed for target-specific
 full system emulation (qemu-system-*) packages.

qemu-system-common-dbgsym: debug symbols for package qemu-system-common

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides common files needed for target-specific
 full system emulation (qemu-system-*) packages.

qemu-system-mips: QEMU full system emulation binaries (mips)

 QEMU is a fast processor emulator: currently the package supports
 MIPS emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following mips hardware: mips mipsel mips64 mips64el.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-mips-dbgsym: debug symbols for package qemu-system-mips

 QEMU is a fast processor emulator: currently the package supports
 MIPS emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following mips hardware: mips mipsel mips64 mips64el.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-misc: QEMU full system emulation binaries (miscelaneous)

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, M68k (ColdFire), MicroBlaze, and SH4
 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 various other hardware which did not made into separate packages.
 Emulators for the following architectures are provided:
  alpha cris lm32 m68k microblaze microblazeel moxie or32 sh4 sh4eb tricore xtensa xtensaeb unicore32.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-misc-dbgsym: debug symbols for package qemu-system-misc

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, M68k (ColdFire), MicroBlaze, and SH4
 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 various other hardware which did not made into separate packages.
 Emulators for the following architectures are provided:
  alpha cris lm32 m68k microblaze microblazeel moxie or32 sh4 sh4eb tricore xtensa xtensaeb unicore32.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-ppc: QEMU full system emulation binaries (ppc)

 QEMU is a fast processor emulator: currently the package supports
 PowerPC emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following PowerPC hardware: ppc ppcemb ppc64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-ppc-dbgsym: debug symbols for package qemu-system-ppc

 QEMU is a fast processor emulator: currently the package supports
 PowerPC emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following PowerPC hardware: ppc ppcemb ppc64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-s390x: QEMU full system emulation binaries (s390x)

 QEMU is a fast processor emulator: currently the package supports
 s390x emulation. By using dynamic translation it achieves reasonable
 speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following s390x hardware: s390x.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-s390x-dbgsym: debug symbols for package qemu-system-s390x

 QEMU is a fast processor emulator: currently the package supports
 s390x emulation. By using dynamic translation it achieves reasonable
 speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following s390x hardware: s390x.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-sparc: QEMU full system emulation binaries (sparc)

 QEMU is a fast processor emulator: currently the package supports
 SPARC emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following sparc hardware: sparc sparc64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-sparc-dbgsym: debug symbols for package qemu-system-sparc

 QEMU is a fast processor emulator: currently the package supports
 SPARC emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following sparc hardware: sparc sparc64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.

qemu-system-x86: QEMU full system emulation binaries (x86)

 QEMU is a fast processor emulator: currently the package supports
 i386 and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following x86 hardware: i386 x86_64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.
 .
 On x86 host hardware this package also enables KVM kernel virtual machine
 usage on systems which supports it.

qemu-system-x86-dbgsym: debug symbols for package qemu-system-x86

 QEMU is a fast processor emulator: currently the package supports
 i386 and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the full system emulation binaries to emulate
 the following x86 hardware: i386 x86_64.
 .
 In system emulation mode QEMU emulates a full system, including a processor
 and various peripherals. It enables easier testing and debugging of system
 code. It can also be used to provide virtual hosting of several virtual
 machines on a single server.
 .
 On x86 host hardware this package also enables KVM kernel virtual machine
 usage on systems which supports it.

qemu-user: QEMU user mode emulation binaries

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the user mode emulation binaries. In this mode
 QEMU can launch Linux processes compiled for one CPU on another CPU.
 .
 If qemu-user-binfmt package is also installed, it will register binary
 format handlers from this qemu-user package with the kernel so it will
 be possible to run foreign binaries directly. However, this might not
 be suitable for using inside foreign chroots, in which case it is
 possible to use qemu-user-static package instead of qemu-user-binmft, --
 qemu-user-static will register statically linked binfmt handlers instead.

qemu-user-binfmt: QEMU user mode binfmt registration for qemu-user

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides binfmt support registration for the user mode
 emulation binaries from qemu-user. This is an empty package, it does
 not contain any additional files, only registration scripts which run
 at install and remove times.

qemu-user-dbgsym: debug symbols for package qemu-user

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the user mode emulation binaries. In this mode
 QEMU can launch Linux processes compiled for one CPU on another CPU.
 .
 If qemu-user-binfmt package is also installed, it will register binary
 format handlers from this qemu-user package with the kernel so it will
 be possible to run foreign binaries directly. However, this might not
 be suitable for using inside foreign chroots, in which case it is
 possible to use qemu-user-static package instead of qemu-user-binmft, --
 qemu-user-static will register statically linked binfmt handlers instead.

qemu-user-static: QEMU user mode emulation binaries (static version)

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the user mode emulation binaries, built
 statically. In this mode QEMU can launch Linux processes compiled for
 one CPU on another CPU.
 .
 If binfmt-support package is installed, qemu-user-static package will
 register binary formats which the provided emulators can handle, so
 that it will be possible to run foreign binaries directly.

qemu-user-static-dbgsym: debug symbols for package qemu-user-static

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides the user mode emulation binaries, built
 statically. In this mode QEMU can launch Linux processes compiled for
 one CPU on another CPU.
 .
 If binfmt-support package is installed, qemu-user-static package will
 register binary formats which the provided emulators can handle, so
 that it will be possible to run foreign binaries directly.

qemu-utils: QEMU utilities

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides QEMU related utilities:
  * qemu-img: QEMU disk image utility
  * qemu-io: QEMU disk exerciser
  * qemu-nbd: QEMU disk network block device server

qemu-utils-dbgsym: debug symbols for package qemu-utils

 QEMU is a fast processor emulator: currently the package supports
 ARM, CRIS, i386, M68k (ColdFire), MicroBlaze, MIPS, PowerPC, SH4,
 SPARC and x86-64 emulation. By using dynamic translation it achieves
 reasonable speed while being easy to port on new host CPUs.
 .
 This package provides QEMU related utilities:
  * qemu-img: QEMU disk image utility
  * qemu-io: QEMU disk exerciser
  * qemu-nbd: QEMU disk network block device server