[ubuntu-cloud-archive/ussuri-updates] qemu (Accepted)

[Corey Bryant]

 qemu (1:4.2-3ubuntu6.14~cloud0) bionic-ussuri; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 qemu (1:4.2-3ubuntu6.14) focal-security; urgency=medium
 .
   * SECURITY REGRESSION: fix multiple regressions caused by CVE-2020-13754
     security update (LP: #1914883)
     - debian/patches/ubuntu/CVE-2020-13754-3.patch: log invalid memory
       accesses in memory.c.
     - debian/patches/ubuntu/CVE-2020-13754-4.patch: allow 16-bit writes to
       memory region in hw/riscv/sifive_test.c.
     - debian/patches/ubuntu/CVE-2020-13754-5.patch: allow 64-bit accesses
       in hw/timer/slavio_timer.c.
     - debian/patches/ubuntu/CVE-2020-13754-6.patch: allow less than 32-bit
       accesses in hw/char/bcm2835_aux.c.
     - debian/patches/ubuntu/CVE-2020-13754-9.patch: fix
       valid.max_access_size to access address registers in
       hw/usb/hcd-xhci.c.

Date: Mon, 22 Feb 2021 16:44:41 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>