Format: 1.8 Date: Tue, 11 Nov 2014 14:17:45 -0500 Source: qemu Binary: qemu qemu-keymaps qemu-system qemu-system-common qemu-system-misc qemu-system-arm qemu-system-mips qemu-system-ppc qemu-system-sparc qemu-system-x86 qemu-user qemu-user-static qemu-utils qemu-guest-agent qemu-kvm qemu-common qemu-system-aarch64 Architecture: amd64 amd64_translations Version: 2.0.0+dfsg-2ubuntu1.7 Distribution: trusty Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: qemu - fast processor emulator qemu-common - dummy transitional package from qemu-common to qemu-keymaps qemu-guest-agent - Guest-side qemu-system agent qemu-keymaps - QEMU keyboard maps qemu-kvm - QEMU Full virtualization on x86 hardware (transitional package) qemu-system - QEMU full system emulation binaries qemu-system-aarch64 - QEMU full system emulation binaries (aarch64) qemu-system-arm - QEMU full system emulation binaries (arm) qemu-system-common - QEMU full system emulation binaries (common files) qemu-system-mips - QEMU full system emulation binaries (mips) qemu-system-misc - QEMU full system emulation binaries (miscelaneous) qemu-system-ppc - QEMU full system emulation binaries (ppc) qemu-system-sparc - QEMU full system emulation binaries (sparc) qemu-system-x86 - QEMU full system emulation binaries (x86) qemu-user - QEMU user mode emulation binaries qemu-user-static - QEMU user mode emulation binaries (static version) qemu-utils - QEMU utilities Changes: qemu (2.0.0+dfsg-2ubuntu1.7) trusty-security; urgency=medium . * SECURITY UPDATE: information disclosure via vga driver - debian/patches/CVE-2014-3615.patch: return the correct memory size, sanity check register writes, and don't use fixed buffer sizes in hw/display/qxl.c, hw/display/vga.c, hw/display/vga_int.h, ui/spice-display.c. - CVE-2014-3615 * SECURITY UPDATE: denial of service via slirp NULL pointer deref - debian/patches/CVE-2014-3640.patch: make sure socket is not just a stub in slirp/udp.c. - CVE-2014-3640 * SECURITY UPDATE: possible privilege escalation via vmware-vga driver - debian/patches/CVE-2014-3689.patch: verify rectangles in hw/display/vmware_vga.c. - CVE-2014-3689 * SECURITY UPDATE: denial of service and possible privilege escalation via vmstate_xhci_event - debian/patches/CVE-2014-5263.patch: fix unterminated field list in hw/usb/hcd-xhci.c. - CVE-2014-5263 * SECURITY UPDATE: possible privilege escalation via pcihp out-of-bounds - debian/patches/CVE-2014-5388.patch: fix bounds checking in hw/acpi/pcihp.c. - CVE-2014-5388 * SECURITY UPDATE: denial of service via VNC console - debian/patches/CVE-2014-7815.patch: validate bits_per_pixel in ui/vnc.c. - CVE-2014-7815 Checksums-Sha1: b51d6b692700e60f33c8e9c224e6184c610ebd75 167576 qemu_2.0.0+dfsg-2ubuntu1.7_amd64.deb 0399326337874b367aeb2bb5e38dc9c839ec9dba 6118 qemu-system_2.0.0+dfsg-2ubuntu1.7_amd64.deb 4bcf0ce2b4bfde8844e473da3ef5ee501f960044 157580 qemu-system-common_2.0.0+dfsg-2ubuntu1.7_amd64.deb 0d38f09f21da569151f48931e3190c5fd5cd6732 5462084 qemu-system-misc_2.0.0+dfsg-2ubuntu1.7_amd64.deb cbc09cc2cfdd8735b58734a80dd0263289efa613 1687572 qemu-system-arm_2.0.0+dfsg-2ubuntu1.7_amd64.deb e2a0dc9fb2c03d89f1f8b0869f8502130b7ade87 2816816 qemu-system-mips_2.0.0+dfsg-2ubuntu1.7_amd64.deb bb43fcc44c7e58f446c5c45086ae2115bf218cf4 2791370 qemu-system-ppc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 6de39a866871ce7c8061da100c94d70c0b5636c4 1602664 qemu-system-sparc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 20a26f9665a5eb50d62d9229cff7c7d7da5f036a 1942190 qemu-system-x86_2.0.0+dfsg-2ubuntu1.7_amd64.deb 5deae737fe1d2fa388470ab3e3469c7ca36eaa06 5390630 qemu-user_2.0.0+dfsg-2ubuntu1.7_amd64.deb beef02b51d1742cb1f21e8aca391af88d017678b 8008268 qemu-user-static_2.0.0+dfsg-2ubuntu1.7_amd64.deb c74e65d43fd645ffe46458e3019a3e4ee24e9758 412954 qemu-utils_2.0.0+dfsg-2ubuntu1.7_amd64.deb a1e902c447a51d9b52a977e021c356ac0b77d237 95078 qemu-guest-agent_2.0.0+dfsg-2ubuntu1.7_amd64.deb c988199c46e26b2a5af52868a3ee32f4b9520edf 7122 qemu-kvm_2.0.0+dfsg-2ubuntu1.7_amd64.deb 567a583651405f5dc16f3e03a0c9e2a138a2c31b 1970 qemu_2.0.0+dfsg-2ubuntu1.7_amd64_translations.tar.gz Checksums-Sha256: 7ebbb576df13fa1363ee52ee42d33813d7973070f7f684589b8645dcd6e9d0ca 167576 qemu_2.0.0+dfsg-2ubuntu1.7_amd64.deb 94946967a6c48083ef4419a8df9d9f5f8c0a106004724aacbee5e09995b83c87 6118 qemu-system_2.0.0+dfsg-2ubuntu1.7_amd64.deb d9942338cc7d4395c8742b3cb0d12f617fc200dc2ccd6dd80fdee8d501719692 157580 qemu-system-common_2.0.0+dfsg-2ubuntu1.7_amd64.deb 4e4b488f69d378e035b1109295ec64330d308a2a0c3be7115dde08073c1e0a0d 5462084 qemu-system-misc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 084802b391d9e449e363187ca9a7af406a099b22b48380de07d4547860df2c81 1687572 qemu-system-arm_2.0.0+dfsg-2ubuntu1.7_amd64.deb c315809f62238d04c160187ef8b2b03444ee4ac108187dda34a4622512104d7d 2816816 qemu-system-mips_2.0.0+dfsg-2ubuntu1.7_amd64.deb a90b60aa0458eed5cad3d578a1ffa37b5801d4ba5f8da6753a96e025edf6229a 2791370 qemu-system-ppc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 6b1af9deea2cc84b9984185fcb2d1fe1c7c3e8dd6e83873098e9ef96d2eb6055 1602664 qemu-system-sparc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 0a8c519bf356b0ff74cedd583eb2231712f77062139f932ff92ed978d2ea464f 1942190 qemu-system-x86_2.0.0+dfsg-2ubuntu1.7_amd64.deb 4ca4c35e98a9dad1fe217f6210206082db67a2a8cb2c5bf5ac3f0885cb42d813 5390630 qemu-user_2.0.0+dfsg-2ubuntu1.7_amd64.deb c9c434090530f3a79a574ef7eb8291dbcfe4232ca0ffbe3ed10b67ed90d1c1d8 8008268 qemu-user-static_2.0.0+dfsg-2ubuntu1.7_amd64.deb 378d363c922f21528e5de59ba3b88225c0ede78cbff44d34243b463ec59a24f9 412954 qemu-utils_2.0.0+dfsg-2ubuntu1.7_amd64.deb fc0b96dd5a4e7c1e5c51af4790eec8b8ad2379719858a4284ec8c7fe6ef57981 95078 qemu-guest-agent_2.0.0+dfsg-2ubuntu1.7_amd64.deb 5c9420b6a72ba317bb6ed5b6d15e8919dd4cce0422f05516c82e94dd89a7fd3f 7122 qemu-kvm_2.0.0+dfsg-2ubuntu1.7_amd64.deb c7ebbb70ca3f7b5b1dc610ed3407bc3da068a532f4a10209824325f5a86d2924 1970 qemu_2.0.0+dfsg-2ubuntu1.7_amd64_translations.tar.gz Files: 0d3f5a121768a2d8c4a465d3d103b6eb 167576 otherosfs optional qemu_2.0.0+dfsg-2ubuntu1.7_amd64.deb 072899adcb0de351c84ebb990cb9133f 6118 otherosfs optional qemu-system_2.0.0+dfsg-2ubuntu1.7_amd64.deb 2fd36c0dd1a12add0bbbc5e72292ae5d 157580 otherosfs optional qemu-system-common_2.0.0+dfsg-2ubuntu1.7_amd64.deb 2b9fb73baa53c66cd633ac18e9c70783 5462084 otherosfs optional qemu-system-misc_2.0.0+dfsg-2ubuntu1.7_amd64.deb a51e814a6d46943d08e5e6e0204f5535 1687572 otherosfs optional qemu-system-arm_2.0.0+dfsg-2ubuntu1.7_amd64.deb 012e97ac5f8d9523c1d543166ac783dd 2816816 otherosfs optional qemu-system-mips_2.0.0+dfsg-2ubuntu1.7_amd64.deb eacdc4ee71ed1e28279c060a7e238aea 2791370 otherosfs optional qemu-system-ppc_2.0.0+dfsg-2ubuntu1.7_amd64.deb c6c56fe0b85f7cc26c87394e0b549a42 1602664 otherosfs optional qemu-system-sparc_2.0.0+dfsg-2ubuntu1.7_amd64.deb 121c82186cb5315d5670014b0b6d0246 1942190 otherosfs optional qemu-system-x86_2.0.0+dfsg-2ubuntu1.7_amd64.deb 2941185f1cf5a8c39e8a0d51f333a346 5390630 otherosfs optional qemu-user_2.0.0+dfsg-2ubuntu1.7_amd64.deb a01d4199aa4ce14437a6294046ba7403 8008268 otherosfs optional qemu-user-static_2.0.0+dfsg-2ubuntu1.7_amd64.deb aba232812f3fa5aece7075a3bf6481e8 412954 otherosfs optional qemu-utils_2.0.0+dfsg-2ubuntu1.7_amd64.deb 5ea525808ace0e0f1247fe1a1c9b7443 95078 otherosfs optional qemu-guest-agent_2.0.0+dfsg-2ubuntu1.7_amd64.deb eec08eccd91fcb75ec892b77a775d2b3 7122 otherosfs optional qemu-kvm_2.0.0+dfsg-2ubuntu1.7_amd64.deb 4ae98260108f7b78c13d5dd1b8198e28 1970 raw-translations - qemu_2.0.0+dfsg-2ubuntu1.7_amd64_translations.tar.gz Original-Maintainer: Debian QEMU Team