[ubuntu/wily-proposed] qemu 1:2.3+dfsg-5ubuntu7 (Accepted)

[Marc Deslauriers]

qemu (1:2.3+dfsg-5ubuntu7) wily; urgency=medium

  * SECURITY UPDATE: denial of service via NE2000 driver
    - debian/patches/CVE-2015-5278.patch: fix infinite loop in
      hw/net/ne2000.c.
    - CVE-2015-5278
  * SECURITY UPDATE: denial of service and possible code execution via
    heap overflow in NE2000 driver
    - debian/patches/CVE-2015-5279.patch: validate ring buffer pointers in
      hw/net/ne2000.c.
    - CVE-2015-5279
  * SECURITY UPDATE: denial of service via e1000 infinite loop
    - debian/patches/CVE-2015-6815.patch: check bytes in hw/net/e1000.c.
    - CVE-2015-6815
  * SECURITY UPDATE: denial of service via illegal ATAPI commands
    - debian/patches/CVE-2015-6855.patch: fix ATAPI command permissions in
      hw/ide/core.c.
    - CVE-2015-6855

Date: Wed, 23 Sep 2015 15:05:51 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/qemu/1:2.3+dfsg-5ubuntu7
-------------- next part --------------
Format: 1.8
Date: Wed, 23 Sep 2015 15:05:51 -0400
Source: qemu
Binary: qemu qemu-system qemu-block-extra qemu-system-common qemu-system-misc qemu-system-arm qemu-system-mips qemu-system-ppc qemu-system-sparc qemu-system-x86 qemu-user qemu-user-static qemu-user-binfmt qemu-utils qemu-guest-agent qemu-kvm libcacard0 libcacard-dev libcacard-tools qemu-system-aarch64
Architecture: source
Version: 1:2.3+dfsg-5ubuntu7
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libcacard-dev - Virtual Common Access Card (CAC) Emulator (development files)
 libcacard-tools - Virtual Common Access Card (CAC) Emulator (tools)
 libcacard0 - Virtual Common Access Card (CAC) Emulator (runtime library)
 qemu       - fast processor emulator
 qemu-block-extra - extra block backend modules for qemu-system and qemu-utils
 qemu-guest-agent - Guest-side qemu-system agent
 qemu-kvm   - QEMU Full virtualization
 qemu-system - QEMU full system emulation binaries
 qemu-system-aarch64 - QEMU full system emulation binaries (aarch64)
 qemu-system-arm - QEMU full system emulation binaries (arm)
 qemu-system-common - QEMU full system emulation binaries (common files)
 qemu-system-mips - QEMU full system emulation binaries (mips)
 qemu-system-misc - QEMU full system emulation binaries (miscelaneous)
 qemu-system-ppc - QEMU full system emulation binaries (ppc)
 qemu-system-sparc - QEMU full system emulation binaries (sparc)
 qemu-system-x86 - QEMU full system emulation binaries (x86)
 qemu-user  - QEMU user mode emulation binaries
 qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user
 qemu-user-static - QEMU user mode emulation binaries (static version)
 qemu-utils - QEMU utilities
Changes:
 qemu (1:2.3+dfsg-5ubuntu7) wily; urgency=medium
 .
   * SECURITY UPDATE: denial of service via NE2000 driver
     - debian/patches/CVE-2015-5278.patch: fix infinite loop in
       hw/net/ne2000.c.
     - CVE-2015-5278
   * SECURITY UPDATE: denial of service and possible code execution via
     heap overflow in NE2000 driver
     - debian/patches/CVE-2015-5279.patch: validate ring buffer pointers in
       hw/net/ne2000.c.
     - CVE-2015-5279
   * SECURITY UPDATE: denial of service via e1000 infinite loop
     - debian/patches/CVE-2015-6815.patch: check bytes in hw/net/e1000.c.
     - CVE-2015-6815
   * SECURITY UPDATE: denial of service via illegal ATAPI commands
     - debian/patches/CVE-2015-6855.patch: fix ATAPI command permissions in
       hw/ide/core.c.
     - CVE-2015-6855
Checksums-Sha1:
 a7c7580bbe5e53e7e5fa08bc44510222ecebfc0e 6791 qemu_2.3+dfsg-5ubuntu7.dsc
 18db01de525f0877fd8f5bc1e9fc771c60c272e6 95828 qemu_2.3+dfsg-5ubuntu7.debian.tar.xz
Checksums-Sha256:
 34e1a6732dab96891d827e347fc7545664f92e77e7af1d02cfba26dfa519bdc2 6791 qemu_2.3+dfsg-5ubuntu7.dsc
 cdb318d521e498c0977b794683adbf5c46faa09d387d6752e29dfdef2e452010 95828 qemu_2.3+dfsg-5ubuntu7.debian.tar.xz
Files:
 9234335351131b91e1f6ad3d123fd5da 6791 otherosfs optional qemu_2.3+dfsg-5ubuntu7.dsc
 1e4ddb6098c68c6fc3e4c2b7e4f39418 95828 otherosfs optional qemu_2.3+dfsg-5ubuntu7.debian.tar.xz
Original-Maintainer: Debian QEMU Team <pkg-qemu-devel at lists.alioth.debian.org>