Summary: | <app-emulation/qemu-2.5.0-r2: i386: null pointer dereference in vapic_write (CVE-2016-1922) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | qemu+disabled |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://www.openwall.com/lists/oss-security/2016/01/16/1 | ||
Whiteboard: | B3 [glsa cve] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 578044 | ||
Bug Blocks: |
Description
Agostino Sarubbo
2016-01-16 10:57:39 UTC
This is fixed upstream: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=4c1396cb576c9b14425558b73de1584c7a9735d7 this is in qemu-2.5.0-r2 and is fine for stable Added to existing GLSA. Clean as part of bug #567420 This issue was resolved and addressed in GLSA 201604-01 at https://security.gentoo.org/glsa/201604-01 by GLSA coordinator Yury German (BlueKnight). |