[Bug 1400775] Re: CVE-2014-8106 insufficient blit region check

[Launchpad Bug Tracker]

This bug was fixed in the package qemu - 2.1+dfsg-4ubuntu6.3

---------------
qemu (2.1+dfsg-4ubuntu6.3) utopic-security; urgency=medium

  * SECURITY UPDATE: code execution via savevm data
    - debian/patches/CVE-2014-7840.patch: validate parameters in
      arch_init.c.
    - CVE-2014-7840
  * SECURITY UPDATE: code execution via cirrus vga blit regions
    (LP: #1400775)
    - debian/patches/CVE-2014-8106.patch: properly validate blit regions in
      hw/display/cirrus_vga.c.
    - CVE-2014-8106
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Wed, 10 Dec 2014 15:53:57 -0500

** Changed in: qemu (Ubuntu Utopic)
       Status: Confirmed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-7840

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-8106

** Changed in: qemu-kvm (Ubuntu Lucid)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1400775

Title:
  CVE-2014-8106 insufficient blit region check

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1400775/+subscriptions