Accepting request 512570 from home:bfrogers:branches:Virtualization
Include latest security fixes. Also fix support statements. Also adjust to recent libvdeplug-devel package name change. OBS-URL: https://build.opensuse.org/request/show/512570 OBS-URL: https://build.opensuse.org/package/show/Virtualization/qemu?expand=0&rev=350
This commit is contained in:
committed by
Git OBS Bridge
parent
eb1e0a8392
commit
481686d650
23
qemu.changes
23
qemu.changes
@@ -1,3 +1,26 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 25 19:36:55 UTC 2017 - brogers@suse.com
|
||||
|
||||
- Address various security/stability issues
|
||||
* Fix DOS vulnerability in qemu-nbd (bsc#1046636 CVE-2017-10664)
|
||||
0069-qemu-nbd-Ignore-SIGPIPE.patch
|
||||
* Fix DOS from stack overflow in debug messages of usb redirection
|
||||
support (bsc#1047674 CVE-2017-10806)
|
||||
0070-usb-redir-fix-stack-overflow-in-usb.patch
|
||||
* Fix OOB access during DMA operation (CVE-2017-11334 bsc#1048902)
|
||||
0071-exec-use-qemu_ram_ptr_length-to-acc.patch
|
||||
* Fix OOB access parsing dhcp slirp options (CVE-2017-11434 bsc#1049381)
|
||||
0072-slirp-check-len-against-dhcp-option.patch
|
||||
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.9
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 25 16:51:20 UTC 2017 - brogers@suse.com
|
||||
|
||||
- Fix support docs to indicate ARM64 is now fully L3 supported in
|
||||
SLES 12 SP3. Apply a few additional clarifications in the support
|
||||
docs. (bsc#1050268)
|
||||
- Adjust to libvdeplug-devel package naming changes.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 18 19:51:45 UTC 2017 - brogers@suse.com
|
||||
|
||||
|
Reference in New Issue
Block a user