[ubuntu-cloud-archive/kilo-proposed] qemu (Accepted)

[James Page]

 qemu (1:2.2+dfsg-5expubuntu9.4~cloud0) trusty-kilo; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 qemu (1:2.2+dfsg-5expubuntu9.4) vivid-security; urgency=medium
 .
   * SECURITY UPDATE: process heap memory disclosure
     - debian/patches/CVE-2015-5165.patch: check sizes in hw/net/rtl8139.c.
     - CVE-2015-5165
   * SECURITY UPDATE: privilege escalation via block device unplugging
     - debian/patches/CVE-2015-5166.patch: properly unhook from BlockBackend
       in hw/ide/piix.c.
     - CVE-2015-5166
   * SECURITY UPDATE: privilege escalation via memory corruption in vnc
     - debian/patches/CVE-2015-5225.patch: use bytes per scanline to apply
       limits in ui/vnc.c.
     - CVE-2015-5225
   * SECURITY UPDATE: denial of service via virtio-serial
     - debian/patches/CVE-2015-5745.patch: don't assume a specific layout
       for control messages in hw/char/virtio-serial-bus.c.
     - CVE-2015-5745

Date: Fri, 28 Aug 2015 06:55:51 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>