586430 – app-emulation/qemu-2.5.1.1 version bump (includes 3 CVE)

Bug 586430 - app-emulation/qemu-2.5.1.1 version bump (includes 3 CVE)

Summary: app-emulation/qemu-2.5.1.1 version bump (includes 3 CVE)

Status:	RESOLVED DUPLICATE of bug 592430

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo QEMU Project

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2016-06-19 22:04 UTC by Kilburn Abrahams
Modified:	2016-09-05 06:25 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kilburn Abrahams 2016-06-19 22:04:24 UTC

Bump qemu to 2.5.1.1 

see https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg01308.html

CHANGELOG:

db51dfc: Update version for 2.5.1.1 release (Michael Roth)
5b7236f: cadence_uart: bounds check write offset (Michael S. Tsirkin)
0bcdb63: Revert "ehci: make idt processing more robust" (Gerd Hoffmann)
706bab6: ehci: apply limit to iTD/sidt descriptors (Gerd Hoffmann)
44b86aa: vga: make sure vga register setup for vbe stays intact 
(CVE-2016-3712). (Gerd Hoffmann)
a6e5e5d: vga: update vga register setup on vbe changes (Gerd Hoffmann)
2f2f74e: vga: factor out vga register setup (Gerd Hoffmann)
46aff2c: vga: add vbe_enabled() helper (Gerd Hoffmann)
4f0323d: vga: fix banked access bounds checking (CVE-2016-3710) (Gerd Hoffmann)

Reproducible: Always

Comment 1 Matthias Maier gentoo-dev

2016-09-05 06:25:57 UTC

This will be resolved with a version bump to 2.7.0

*** This bug has been marked as a duplicate of bug 592430 ***