Bug 556630 (CVE-2015-5165)

Summary:	<app-emulation/qemu-2.3.0-r5: Use after free and leak of uninitialized heap memory in rtl8139 device model
Product:	Gentoo Security	Reporter:	Agostino Sarubbo <ago>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	qemu+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [noglsa]
Package list:		Runtime testing required:	---

Description Agostino Sarubbo gentoo-dev

2015-08-04 07:24:06 UTC

+++ This bug was initially created as a clone of Bug #556304 +++

Comment 1 Agostino Sarubbo gentoo-dev

2015-08-04 07:28:01 UTC

Arches, please test and mark stable:
=app-emulation/qemu-2.3.0-r5
=app-emulation/qemu-guest-agent-2.3.0
Target keywords : "amd64 x86"

Comment 2 Agostino Sarubbo gentoo-dev

2015-08-04 08:19:06 UTC

amd64 stable

Comment 3 Agostino Sarubbo gentoo-dev

2015-08-04 08:19:45 UTC

x86 stable.

Maintainer(s), please cleanup.
Security, please vote.

Comment 4 Agostino Sarubbo gentoo-dev

2015-08-04 08:20:54 UTC

Unless there will be request, ppc and ppc64 pass for now for qemu-guest-agent

Comment 5 Manuel Rüger (RETIRED) gentoo-dev

2015-08-28 00:19:32 UTC

Vulnerable versions have been removed.

Comment 6 Stefan Behte (RETIRED) gentoo-dev

2015-11-09 21:53:41 UTC

Vote: no.

Comment 7 Kristian Fiskerstrand (RETIRED) gentoo-dev

2015-11-09 21:58:15 UTC

GLSA Vote: No