Accepting request 536899 from home:bfrogers:branches:Virtualization

Add note about QED format support being withdrawn.
Also add a few more security fixes

OBS-URL: https://build.opensuse.org/request/show/536899
OBS-URL: https://build.opensuse.org/package/show/Virtualization/qemu?expand=0&rev=372
This commit is contained in:
Bruce Rogers
2017-10-26 14:38:26 +00:00
committed by Git OBS Bridge
parent e3edfcd663
commit 40d6206ff1
13 changed files with 288 additions and 28 deletions

View File

@@ -1,3 +1,19 @@
-------------------------------------------------------------------
Thu Oct 19 21:57:57 UTC 2017 - brogers@suse.com
- Add announcement in support docs about qed storage format no
longer being supported in next major SLE release (SLE15)
(fate#324200)
- Address various security/stability issues
* Fix DoS in I/O channel websockets (CVE-2017-15268 bsc#1062942)
0040-io-monitor-encoutput-buffer-size-fr.patch
* Fix OOB access in cirrus vga device emulation (CVE-2017-15289
bsc#1063122)
0041-cirrus-fix-oob-access-in-mode4and5-.patch
* Fix information leak in 9pfs interface (CVE-2017-15038 bsc#1062069)
0042-9pfs-use-g_malloc0-to-allocate-spac.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
-------------------------------------------------------------------
Mon Oct 16 14:50:03 UTC 2017 - brogers@suse.com