-
qemu (1.5.0+dfsg-3ubuntu5.4) saucy-security; urgency=medium
* SECURITY UPDATE: possible arbitrary code execution via vmxnet3 device
- debian/patches/CVE-2013-4544.patch: add more validation in
hw/net/vmxnet3.c.
- CVE-2013-4544
* SECURITY UPDATE: arbitrary code execution via MAC address table update
- debian/patches/CVE-2014-0150.patch: fix overflow in
hw/net/virtio-net.c.
- CVE-2014-0150
* SECURITY UPDATE: denial of service and possible code execution via
smart self test counter
- debian/patches/CVE-2014-2894.patch: correct self-test count in
hw/ide/core.c.
- CVE-2014-2894
-- Marc Deslauriers <email address hidden> Fri, 25 Apr 2014 16:30:08 -0400
-
qemu (1.5.0+dfsg-3ubuntu5.3) saucy-security; urgency=medium
* SECURITY UPDATE: denial of service via virtio device hot-plugging
- debian/patches/CVE-2013-4377.patch: backport upstream commits to
refactor virtio device unplugging.
- CVE-2013-4377
* SECURITY UPDATE: privilege escalation via REPORT LUNS
- debian/patches/CVE-2013-4344.patch: support more than 256 LUNS in
hw/scsi/scsi-bus.c, include/hw/scsi/scsi.h.
- CVE-2013-4344
* SECURITY UPDATE: denial of service in qdisk PV disk backend
- debian/patches/CVE-2013-4375.patch: mark ioreq as mapped before
unmapping in error case in hw/block/xen_disk.c.
- CVE-2013-4375
-- Marc Deslauriers <email address hidden> Tue, 28 Jan 2014 05:38:06 -0500
-
qemu (1.5.0+dfsg-3ubuntu5.2) saucy-proposed; urgency=low
* qemu-system-common.install: add debian/tmp/usr/lib to install the
qemu-bridge-helper (LP: #1202839)
-- Serge Hallyn <email address hidden> Wed, 11 Dec 2013 09:57:49 -0600
-
qemu (1.5.0+dfsg-3ubuntu5.1) saucy-proposed; urgency=low
* debian/control: qemu-utils must Replace: qemu-kvm as it did in raring,
to prevent lts-to-lts updates from breaking. (LP: #1243403)
-- Serge Hallyn <email address hidden> Wed, 30 Oct 2013 11:52:44 -0500
-
qemu (1.5.0+dfsg-3ubuntu5) saucy; urgency=low
* Cherrypick upstream patch to fix crash with rng device (LP: #1235017)
- virtio-rng-fix-crash
-- Serge Hallyn <email address hidden> Wed, 09 Oct 2013 17:46:49 -0500
-
qemu (1.5.0+dfsg-3ubuntu4) saucy; urgency=low
* Re-introduce snippet in upstart job to load kvm modules if needed.
(LP: #1218459)
-- Serge Hallyn <email address hidden> Mon, 16 Sep 2013 22:43:52 +0000
-
qemu (1.5.0+dfsg-3ubuntu3) saucy; urgency=low
* Cherry-picking three Xen related patches targetted for qemu-stable:
* xen-simplify-xen_enabled.patch
* main_loop-do-not-set-nonblocking-if-xen_enabled.patch
* xen_machine_pv-do-not-create-a-dummy-CPU-in-machine-.patch
-- Stefan Bader <email address hidden> Fri, 26 Jul 2013 15:01:44 +0200
-
qemu (1.5.0+dfsg-3ubuntu2) saucy; urgency=low
* Drop openbios-ppc and openhackware Depends to Suggests for now.
-- Adam Conrad <email address hidden> Wed, 05 Jun 2013 03:23:56 -0600
-
qemu (1.5.0+dfsg-3ubuntu1) saucy; urgency=low
* Merge 1.5.0+dfs-3 from debian unstable. Remaining changes:
- debian/control
* update maintainer
* remove libiscsi, usb-redir, vde, vnc-jpeg, and libssh2-1-dev
from build-deps
* enable rbd
* add qemu-system and qemu-common B/R to qemu-keymaps
* add D:udev, R:qemu, R:qemu-common and B:qemu-common to
qemu-system-common
* qemu-system-arm, qemu-system-ppc, qemu-system-sparc:
- add qemu-kvm to Provides
- add qemu-common, qemu-kvm, kvm to B/R
- remove openbios-sparc from qemu-system-sparc D
* qemu-system-x86:
- add qemu-common to Breaks/Replaces.
- add cpu-checker to Recommends.
* qemu-user: add B/R:qemu-kvm
* qemu-kvm:
- add armhf armel powerpc sparc to Architecture
- C/R/P: qemu-kvm-spice
* add qemu-common package
* drop qemu-slof which is not packaged in ubuntu
- add qemu-system-common.links for tap ifup/down scripts and OVMF link.
- qemu-system-x86.links:
* remove pxe rom links which are in kvm-ipxe
* add symlink for kvm.1 manpage
- debian/rules
* add kvm-spice symlink to qemu-kvm
* call dh_installmodules for qemu-system-x86
* update dh_installinit to install upstart script
* run dh_installman (Closes: #709241) (cherrypicked from 1.5.0+dfsg-2)
- Add qemu-utils.links for kvm-* symlinks.
- Add qemu-system-x86.qemu-kvm.upstart and .default
- Add qemu-system-x86.modprobe to set nesting=1
- Add qemu-system-common.preinst to add kvm group
- qemu-system-common.postinst: remove bad group acl if there, then have
udev relabel /dev/kvm.
- Dropped patches:
* 0001-fix-wrong-output-with-info-chardev-for-tcp-socket.patch
- Kept patches:
* expose_vms_qemu64cpu.patch - updated
* gridcentric patch - updated
* linaro arm patches from qemu-linaro rebasing branch
qemu (1.5.0+dfsg-3) unstable; urgency=low
* fix sections: misc => otherosfs
* remove obsolete conffiles (kvm-ifup, kvm-ifdown, target-x86_64.conf)
from /etc/kvm/ in qemu-kvm (Closes: #710328)
* rework debian/rules a bit, to build various bits depending on
which packages are requested, not depending on ad-hoc host/arch
logic
* do not fail at install if kvm module loading failed on x86 or
if modprobe isn't installed (Closes: #710496)
* also suggest kmod to be able to load x86 kvm modules
* suggest sgabios for qemu-system-x86 and put a symlink to sgabios.bin
(Closes: #696985)
* add rules to build just one of arch/indep parts, to make
buildd log scanner happier (E-binary-arch-produces-all)
* use verbose build by default (V=1) and let it to be overridden
-- Serge Hallyn <email address hidden> Tue, 04 Jun 2013 22:56:43 +0200
-
qemu (1.5.0+dfsg-2ubuntu2) saucy; urgency=low
* Drop openbios-ppc and openhackware Depends to Suggests for now.
-- Adam Conrad <email address hidden> Wed, 29 May 2013 11:16:28 -0600
-
qemu (1.5.0+dfsg-2ubuntu1) saucy; urgency=low
* Merge 1.5.0+dfs-2 from debian unstable. Remaining changes:
- debian/control
* update maintainer
* remove libiscsi, usb-redir, vde, vnc-jpeg, and libssh2-1-dev
from build-deps
* enable rbd
* add qemu-system and qemu-common B/R to qemu-keymaps
* add D:udev, R:qemu, R:qemu-common and B:qemu-common to
qemu-system-common
* qemu-system-arm, qemu-system-ppc, qemu-system-sparc:
- add qemu-kvm to Provides
- add qemu-common, qemu-kvm, kvm to B/R
- remove openbios-sparc from qemu-system-sparc D
* qemu-system-x86:
- add qemu-common to Breaks/Replaces.
- add cpu-checker to Recommends.
* qemu-user: add B/R:qemu-kvm
* qemu-kvm:
- add armhf armel powerpc sparc to Architecture
- C/R/P: qemu-kvm-spice
* add qemu-common package
* drop qemu-slof which is not packaged in ubuntu
- add qemu-system-common.links for tap ifup/down scripts and OVMF link.
- qemu-system-x86.links:
* remove pxe rom links which are in kvm-ipxe
* add symlink for kvm.1 manpage
- debian/rules
* add kvm-spice symlink to qemu-kvm
* call dh_installmodules for qemu-system-x86
* update dh_installinit to install upstart script
* run dh_installman (Closes: #709241) (cherrypicked from 1.5.0+dfsg-2)
- Add qemu-utils.links for kvm-* symlinks.
- Add qemu-system-x86.qemu-kvm.upstart and .default
- Add qemu-system-x86.modprobe to set nesting=1
- Add qemu-system-common.preinst to add kvm group
- qemu-system-common.postinst: remove bad group acl if there, then have
udev relabel /dev/kvm.
- Dropped patches:
* 0001-fix-wrong-output-with-info-chardev-for-tcp-socket.patch
- Kept patches:
* expose_vms_qemu64cpu.patch - updated
* gridcentric patch - updated
* linaro arm patches from qemu-linaro rebasing branch
-- Serge Hallyn <email address hidden> Tue, 28 May 2013 08:18:30 -0500
-
qemu (1.4.0+dfsg-1expubuntu4) raring; urgency=low
* re-add qemu-system-x86.modprobe to set nesting=1 (LP: #1155177)
* qemu-system-x86.qemu-kvm.upstart:
- remove NESTED workarounds from upstart file.
- remove loading of modules which is now always done
- remove TAPR define which is no longer used
* move customizable defines back to qemu-kvm.default
* copy creation of group kvm to preinst - the group must exist when the
kvm udev rule is installed (LP: #1103022) (LP: #1092715)
* add adduser to qemu-system-common Pre-Depends for use by preinst.
-- Serge Hallyn <email address hidden> Thu, 14 Mar 2013 14:21:53 -0500