[Bug 1400775] Re: CVE-2014-8106 insufficient blit region check

Launchpad Bug Tracker 1400775 at bugs.launchpad.net
Thu Dec 11 19:03:20 UTC 2014


This bug was fixed in the package qemu-kvm - 0.12.3+noroms-0ubuntu9.26

---------------
qemu-kvm (0.12.3+noroms-0ubuntu9.26) lucid-security; urgency=medium

  * SECURITY UPDATE: code execution via cirrus vga blit regions
    (LP: #1400775)
    - debian/patches/CVE-2014-8106.patch: properly validate blit regions in
      hw/cirrus_vga.c.
    - CVE-2014-8106
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Wed, 10 Dec 2014 16:18:02 -0500

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1400775

Title:
  CVE-2014-8106 insufficient blit region check

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1400775/+subscriptions



More information about the Ubuntu-server-bugs mailing list