Summary: | <app-emulation/qemu-2.5.0-r2: ide: ahci null pointer dereference when using FIS CLB engines (CVE-2016-2197) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | qemu+disabled |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.openwall.com/lists/oss-security/2016/01/29/2 | ||
Whiteboard: | B3 [glsa cve] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 578044 | ||
Bug Blocks: |
Description
Agostino Sarubbo
2016-01-29 08:14:40 UTC
fixed landed upstream here: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=99b4cb71069f109b79b27bc629fc0cf0886dbc4b this is in qemu-2.5.0-r2 and is fine for stable Added to existing GLSA. Clean as part of bug #567420 This issue was resolved and addressed in GLSA 201604-01 at https://security.gentoo.org/glsa/201604-01 by GLSA coordinator Yury German (BlueKnight). |