linux/poky.git/meta/recipes-devtools/qemu, branch krogoth-next

qemu: Security fix CVE-2016-4952

2017-05-18T12:14:20+00:00

affects qemu < 2.7.0 Quick Emulator(Qemu) built with the VMWARE PVSCSI paravirtual SCSI bus emulation support is vulnerable to an OOB r/w access issue. It could occur while processing SCSI commands 'PVSCSI_CMD_SETUP_RINGS' or 'PVSCSI_CMD_SETUP_MSG_RING'. A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS. References: ---------- http://www.openwall.com/lists/oss-security/2016/05/23/1 (From OE-Core rev: 3d6b4fd6bc4338b139ebcaf51b67c56cc97ba2ed) Signed-off-by: Adrian Dudau Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security fix CVE-2016-4439

2017-05-18T12:14:20+00:00

affects qemu < 2.7.0 Quick Emulator(Qemu) built with the ESP/NCR53C9x controller emulation support is vulnerable to an OOB write access issue. The controller uses 16-byte FIFO buffer for command and data transfer. The OOB write occurs while writing to this command buffer in routine get_cmd(). A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS. References: ---------- http://www.openwall.com/lists/oss-security/2016/05/19/4 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4441 (From OE-Core rev: 1bc071172236ea020cac9db96e33de81950a15ff) Signed-off-by: Adrian Dudau Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Secuirty fix for CVE-2016-5403

2016-09-23T14:27:06+00:00

affects qemu < 2.7.0-rc0 (From OE-Core rev: c53820180cdccd97de1f314078570fac1ff16052) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security fix for CVE-2016-4002

2016-09-23T14:27:06+00:00

affects qemu < 2.6.0 (From OE-Core rev: 4c6493e90c7102a5bfa8aba4c00b112d083e91b8) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security fix CVE-2016-6351

2016-09-23T14:27:06+00:00

affects qemu < 2.6.0 (From OE-Core rev: 72ee7cac11523a56b99282c03199b5b84326edf5) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security fix CVE-2016-4439

2016-09-23T14:27:06+00:00

affects qemu < 2.6.0 (From OE-Core rev: b5c787631cd35fa5b3f10391c883ae7a3717690f) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security Fix CVE-2016-3712

2016-09-23T14:27:06+00:00

affects qemu < 2.6.0 (From OE-Core rev: ed78691a46a3c928297ae166e92fabdffa9e53c9) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security Fix CVE-2016-3710

2016-09-23T14:27:06+00:00

affects Qemu < 2.6.0 (From OE-Core rev: aa366a5cb5c4ed84537381d71dd5e66514c575be) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: remove explicit but redundant native build dependencies

2016-06-29T18:35:57+00:00

qemu-native was optionally depending on libxext-native if the DISTRO_FEATURES included x11. This dependency was required back when we didn't build libsdl-native and causes an undesirable relationship between DISTRO_FEATURES and qemu-native. As the dependency isn't required anymore, remove it. (From OE-Core rev: f58f364b1ae97805abc5f9eb7b300617f59826b2) (From OE-Core rev: 9558dfc37abfbdd3e66107b346b78ac31074c4dd) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

qemu: Security fix CVE-2016-2858

2016-04-29T06:41:44+00:00

(From OE-Core rev: 48909052e7b19ba108ee7813c1efdbed0c2e06ab) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie