Format: 1.8 Date: Tue, 12 Aug 2014 13:30:27 -0400 Source: qemu-kvm Binary: qemu-kvm qemu-utils qemu-common kvm qemu Architecture: powerpc Version: 1.0+noroms-0ubuntu14.17 Distribution: precise Urgency: medium Maintainer: Ubuntu/powerpc Build Daemon Changed-By: Marc Deslauriers Description: kvm - dummy transitional package from kvm to qemu-kvm qemu - dummy transitional package from qemu to qemu-kvm qemu-common - qemu common functionality (bios, documentation, etc) qemu-kvm - Full virtualization on i386 and amd64 hardware qemu-utils - qemu utilities Launchpad-Bugs-Fixed: 1322204 Changes: qemu-kvm (1.0+noroms-0ubuntu14.17) precise-security; urgency=medium . * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0142.patch: validate extent_size header field in block/bochs.c, validate s->tracks in block/parallels.c, validate block size in block/vpc.c, backport function to qemu-common.h. - CVE-2014-0142 * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0143.patch: validate nb_sectors in block.c, validate catalog_size header field in block/bochs.c, prevent offsets_size integer overflow in block/cloop.c, fix catalog size integer overflow in block/parallels.c, validate new_l1_size in block/qcow2-cluster.c, use proper size in block/qcow2-refcount.c, check L1 snapshot table size in block/qcow2-snapshot.c, check active L1 table size in block/qcow2.c, define max size in block/qcow2.h. - CVE-2014-0143 * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0144.patch: validate block sizes and offsets in block/cloop.c, check offset in block/curl.c, validate size in block/qcow2-refcount.c, check number of snapshots in block/qcow2-snapshot.c, check sizes and offsets in block/qcow2.c, move structs to block/qcow2.h, check sizes in block/vdi.c, prevent overflows in block/vpc.c. - CVE-2014-0144 * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0145.patch: check chunk sizes in block/dmg.c, use correct size in block/qcow2-snapshot.c. - CVE-2014-0145 * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0146.patch: calculate offsets properly in block/qcow2.c. - CVE-2014-0146 * SECURITY UPDATE: denial of service and possible code exection via incorrect image format validation (LP: #1322204) - debian/patches/CVE-2014-0147.patch: use proper sizes in block/bochs.c, properly calculate refcounts in block/qcow2-refcount.c, block/qcow2.c. - CVE-2014-0147 * SECURITY UPDATE: multiple buffer overflows on invalid state load - debian/patches: added large number of upstream patches pulled from git tree. - CVE-2013-4148 - CVE-2013-4151 - CVE-2013-4527 - CVE-2013-4529 - CVE-2013-4530 - CVE-2013-4531 - CVE-2013-4532 - CVE-2013-4533 - CVE-2013-4534 - CVE-2013-4535 - CVE-2013-4536 - CVE-2013-4537 - CVE-2013-4538 - CVE-2013-4539 - CVE-2013-4540 - CVE-2013-4541 - CVE-2013-6399 - CVE-2014-0182 - CVE-2014-0222 - CVE-2014-0223 - CVE-2014-3461 Checksums-Sha1: 63c74aacd251ed0cce40be6b8d1138e9ccd27177 3535382 qemu-kvm_1.0+noroms-0ubuntu14.17_powerpc.deb 8c1dc903d422aa088edafe1b58aba77b34baf8e6 375026 qemu-utils_1.0+noroms-0ubuntu14.17_powerpc.deb 00e06cdd90b71c81d411617670bf1acabbd24d4d 2666 qemu_1.0+noroms-0ubuntu14.17_powerpc.deb c56eff9d2ab82e7e3d470407cb1e74eeeec7290e 3224 kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.17_powerpc.deb Checksums-Sha256: 74dd91d9eefe89ec76554d6ec5b113756e12d245ca75cd739914cd780d815371 3535382 qemu-kvm_1.0+noroms-0ubuntu14.17_powerpc.deb 51460881b6c5c1ae188d618c3206fa2935dc44e5e7d81fee3218017f79cb5ed3 375026 qemu-utils_1.0+noroms-0ubuntu14.17_powerpc.deb 51602e74c0244075d4fab4a3d96a63e9404f441a3eccbe0b5e76d280c8ca4573 2666 qemu_1.0+noroms-0ubuntu14.17_powerpc.deb b8eff8c4aa494d923c71b1443126d44c973f5864475d38f40591a215162374d1 3224 kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.17_powerpc.deb Files: 80c7b293226744a4de6c71705e73d0c9 3535382 misc optional qemu-kvm_1.0+noroms-0ubuntu14.17_powerpc.deb bbf69391258c76c14fd157ca775adcca 375026 misc optional qemu-utils_1.0+noroms-0ubuntu14.17_powerpc.deb 810b728766dae98612e98c3e938de976 2666 misc optional qemu_1.0+noroms-0ubuntu14.17_powerpc.deb 94d052d59c3a083cf98625f1346ebfa5 3224 misc optional kvm_84+dfsg-0ubuntu16+1.0+noroms+0ubuntu14.17_powerpc.deb