rpms/qemu
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path (bz #1230536)

Browse Source 
CVE-2015-3214: i8254: out-of-bounds memory access (bz #1243728)
CVE-2015-5158: scsi stack buffer overflow (bz #1246025)
CVE-2015-5154: ide: atapi: heap overflow during I/O buffer memory access (bz #1247141)
CVE-2015-5165: rtl8139 uninitialized heap memory information leakage to guest (bz #1249755)
CVE-2015-5166: BlockBackend object use after free issue (bz #1249758)
CVE-2015-5745: buffer overflow in virtio-serial (bz #1251160)
This commit is contained in:
Cole Robinson 2015-08-09 13:08:31 -04:00
parent de4550957e
commit 4c6dc5b3d6
1 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
qemu.spec
View File

@ -40,13 +40,13 @@
Summary: QEMU is a FAST! processor emulator Summary: QEMU is a FAST! processor emulator
Name: qemu Name: qemu
Version: 2.4.0 Version: 2.4.0
Release: 0.1.rc0%{?dist} Release: 0.2.rc4%{?dist}
Epoch: 2 Epoch: 2
License: GPLv2+ and LGPLv2+ and BSD License: GPLv2+ and LGPLv2+ and BSD
Group: Development/Tools Group: Development/Tools
URL: http://www.qemu.org/ URL: http://www.qemu.org/
Source0: http://wiki.qemu-project.org/download/%{name}-%{version}-rc0.tar.bz2 Source0: http://wiki.qemu-project.org/download/%{name}-%{version}-rc4.tar.bz2
Source1: qemu.binfmt Source1: qemu.binfmt
@ -540,7 +540,7 @@ CAC emulation development files.
%prep %prep
%setup -q -n qemu-%{version}-rc0 %setup -q -n qemu-%{version}-rc4
%autopatch -p1 %autopatch -p1
@ -1200,6 +1200,17 @@ getent passwd qemu >/dev/null || \
%changelog %changelog
* Sun Aug 09 2015 Cole Robinson <crobinso@redhat.com> - 2:2.4.0-0.2.rc4
- CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path (bz #1230536)
- CVE-2015-3214: i8254: out-of-bounds memory access (bz #1243728)
- CVE-2015-5158: scsi stack buffer overflow (bz #1246025)
- CVE-2015-5154: ide: atapi: heap overflow during I/O buffer memory access (bz
#1247141)
- CVE-2015-5165: rtl8139 uninitialized heap memory information leakage to
guest (bz #1249755)
- CVE-2015-5166: BlockBackend object use after free issue (bz #1249758)
- CVE-2015-5745: buffer overflow in virtio-serial (bz #1251160)
* Tue Jul 14 2015 Cole Robinson <crobinso@redhat.com> 2:2.4.0-0.1-rc0 * Tue Jul 14 2015 Cole Robinson <crobinso@redhat.com> 2:2.4.0-0.1-rc0
- Rebased to version 2.4.0-rc0 - Rebased to version 2.4.0-rc0