[ubuntu/xenial-proposed] qemu 1:2.5+dfsg-5ubuntu1 (Accepted)

Serge Hallyn serge.hallyn at ubuntu.com
Tue Feb 9 23:48:16 UTC 2016 

qemu (1:2.5+dfsg-5ubuntu1) xenial; urgency=medium

  * Merge with Debian; remaining changes:
    - debian/rules: do not drop the init scripts loading kvm modules
      (still needed in precise in cloud archive)
    - qemu-system-common.postinst:
      * remove acl placed by udev, and add udevadm trigger.
      * reload kvm_intel if needed to set nested=1
    - qemu-system-common.preinst: add kvm group if needed
    - add qemu-kvm upstart job and defaults file (rules,
      qemu-system-x86.qemu-kvm.default, qemu-system-x86.qemu-kvm.upstart)
    - rules,qemu-system-x86.modprobe: support use under older udevs which
      do not auto-load the kvm kernel module.  Enable nesting by default
      on intel.
    - d/p/ubuntu/expose-vmx_qemu64cpu.patch: enable nested kvm by default
      in qemu64 cpu type.
    - d/p/ubuntu/define-ubuntu-machine-types.patch: define distro machine
      types to ease future live vm migration.
    - apport hook for qemu source package: d/source_qemu-kvm.py,
      d/qemu-system-common.install
    - Make qemu-system-common and qemu-utils depend on qemu-block-extra
      to fix errors with missing block backends. (LP: #1495895)
    - Enable pie by default, on ubuntu/s390x.
    - Include s390-ccw.img firmware.

qemu (1:2.5+dfsg-5) unstable; urgency=medium

  * fix misspellings in previous debian/changelog entry
  * e1000-eliminate-infinite-loops-on-out-of-bounds-start-CVE-2016-1981.patch
    (Closes: #812307, CVE-2016-1981)
  * hmp-fix-sendkey-out-of-bounds-write-CVE-2015-8619.patch
    (Closes: #809237, CVE-2015-8619)
  * use `command -v' instead of `type' to check for command existence

qemu (1:2.5+dfsg-4) unstable; urgency=medium

  * change misspelling of won't in NEWS (lintian)
  * two patches from upstream to enable sigaltstack syscall (linux-user)
    (Closes: #805826)
  * word-wrapped last entry in debian/changelog
  * use type to find out whenever update-binfmts is available
  * fw_cfg-add-check-to-validate-current-entry-value-CVE-2016-1714.patch
    (Partial) patch targeted 2.3 which fixes the read side of the issue
    (Closes: CVE-2016-1714)
  * i386-avoid-null-pointer-dereference-CVE-2016-1922.patch
    (Closes: #811201, CVE-2016-1922)

qemu (1:2.5+dfsg-3) unstable; urgency=high

  [ Aurelien Jarno ]
  * debian/copyright:
    fix a spelling error reported by lintian: dependecy -> dependency.

  [ Michael Tokarev ]
  * net-vmxnet3-avoid-memory-leakage-in-activate_device patch
    (Closes: #808145, CVE-2015-8567, CVE-2015-8568)
  * scsi-initialise-info-object-with-appropriate-size-CVE-2015-8613.patch
    (Closes: #809232, CVE-2015-8613)
  * net-rocker-fix-an-incorrect-array-bounds-check-CVE-2015-8701.patch
    (Closes: #809313, CVE-2015-8701)

qemu (1:2.5+dfsg-2) unstable; urgency=high

  * ehci-make-idt-processing-more-robust-CVE-2015-8558.patch
    (Closes: #808144, CVE-2015-8558)
  * virtio-9p-use-accessor-to-get-thread_pool.patch (Closes: #808357)
  * two upstream patches from xsa-155 fixing unsafe shared memory access in xen
    (Closes: #809229, CVE-2015-8550)
  * net-ne2000-fix-bounds-check-in-ioport-operations-CVE-2015-8743.patch
    (Closes: #810519, CVE-2015-8743)
  * ide-ahci-reset-ncq-object-to-unused-on-error-CVE-2016-1568.patch
    (Closes: #810527, CVE-2016-1568)
  * changed build-depends from libpng12-dev to libpng-dev (Closes: #810205)

Date: Tue, 09 Feb 2016 10:24:49 -0800
Changed-By: Serge Hallyn <serge.hallyn at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 09 Feb 2016 10:24:49 -0800
Source: qemu
Binary: qemu qemu-system qemu-block-extra qemu-system-common qemu-system-misc qemu-system-arm qemu-system-mips qemu-system-ppc qemu-system-sparc qemu-system-x86 qemu-user qemu-user-static qemu-user-binfmt qemu-utils qemu-guest-agent qemu-kvm qemu-system-aarch64
Architecture: source
Version: 1:2.5+dfsg-5ubuntu1
Distribution: xenial
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Serge Hallyn <serge.hallyn at ubuntu.com>
Description:
 qemu       - fast processor emulator
 qemu-block-extra - extra block backend modules for qemu-system and qemu-utils
 qemu-guest-agent - Guest-side qemu-system agent
 qemu-kvm   - QEMU Full virtualization
 qemu-system - QEMU full system emulation binaries
 qemu-system-aarch64 - QEMU full system emulation binaries (aarch64)
 qemu-system-arm - QEMU full system emulation binaries (arm)
 qemu-system-common - QEMU full system emulation binaries (common files)
 qemu-system-mips - QEMU full system emulation binaries (mips)
 qemu-system-misc - QEMU full system emulation binaries (miscelaneous)
 qemu-system-ppc - QEMU full system emulation binaries (ppc)
 qemu-system-sparc - QEMU full system emulation binaries (sparc)
 qemu-system-x86 - QEMU full system emulation binaries (x86)
 qemu-user  - QEMU user mode emulation binaries
 qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user
 qemu-user-static - QEMU user mode emulation binaries (static version)
 qemu-utils - QEMU utilities
Closes: 805826 808144 808145 808357 809229 809232 809237 809313 810205 810519 810527 811201 812307
Launchpad-Bugs-Fixed: 1495895
Changes:
 qemu (1:2.5+dfsg-5ubuntu1) xenial; urgency=medium
 .
   * Merge with Debian; remaining changes:
     - debian/rules: do not drop the init scripts loading kvm modules
       (still needed in precise in cloud archive)
     - qemu-system-common.postinst:
       * remove acl placed by udev, and add udevadm trigger.
       * reload kvm_intel if needed to set nested=1
     - qemu-system-common.preinst: add kvm group if needed
     - add qemu-kvm upstart job and defaults file (rules,
       qemu-system-x86.qemu-kvm.default, qemu-system-x86.qemu-kvm.upstart)
     - rules,qemu-system-x86.modprobe: support use under older udevs which
       do not auto-load the kvm kernel module.  Enable nesting by default
       on intel.
     - d/p/ubuntu/expose-vmx_qemu64cpu.patch: enable nested kvm by default
       in qemu64 cpu type.
     - d/p/ubuntu/define-ubuntu-machine-types.patch: define distro machine
       types to ease future live vm migration.
     - apport hook for qemu source package: d/source_qemu-kvm.py,
       d/qemu-system-common.install
     - Make qemu-system-common and qemu-utils depend on qemu-block-extra
       to fix errors with missing block backends. (LP: #1495895)
     - Enable pie by default, on ubuntu/s390x.
     - Include s390-ccw.img firmware.
 .
 qemu (1:2.5+dfsg-5) unstable; urgency=medium
 .
   * fix misspellings in previous debian/changelog entry
   * e1000-eliminate-infinite-loops-on-out-of-bounds-start-CVE-2016-1981.patch
     (Closes: #812307, CVE-2016-1981)
   * hmp-fix-sendkey-out-of-bounds-write-CVE-2015-8619.patch
     (Closes: #809237, CVE-2015-8619)
   * use `command -v' instead of `type' to check for command existence
 .
 qemu (1:2.5+dfsg-4) unstable; urgency=medium
 .
   * change misspelling of won't in NEWS (lintian)
   * two patches from upstream to enable sigaltstack syscall (linux-user)
     (Closes: #805826)
   * word-wrapped last entry in debian/changelog
   * use type to find out whenever update-binfmts is available
   * fw_cfg-add-check-to-validate-current-entry-value-CVE-2016-1714.patch
     (Partial) patch targeted 2.3 which fixes the read side of the issue
     (Closes: CVE-2016-1714)
   * i386-avoid-null-pointer-dereference-CVE-2016-1922.patch
     (Closes: #811201, CVE-2016-1922)
 .
 qemu (1:2.5+dfsg-3) unstable; urgency=high
 .
   [ Aurelien Jarno ]
   * debian/copyright:
     fix a spelling error reported by lintian: dependecy -> dependency.
 .
   [ Michael Tokarev ]
   * net-vmxnet3-avoid-memory-leakage-in-activate_device patch
     (Closes: #808145, CVE-2015-8567, CVE-2015-8568)
   * scsi-initialise-info-object-with-appropriate-size-CVE-2015-8613.patch
     (Closes: #809232, CVE-2015-8613)
   * net-rocker-fix-an-incorrect-array-bounds-check-CVE-2015-8701.patch
     (Closes: #809313, CVE-2015-8701)
 .
 qemu (1:2.5+dfsg-2) unstable; urgency=high
 .
   * ehci-make-idt-processing-more-robust-CVE-2015-8558.patch
     (Closes: #808144, CVE-2015-8558)
   * virtio-9p-use-accessor-to-get-thread_pool.patch (Closes: #808357)
   * two upstream patches from xsa-155 fixing unsafe shared memory access in xen
     (Closes: #809229, CVE-2015-8550)
   * net-ne2000-fix-bounds-check-in-ioport-operations-CVE-2015-8743.patch
     (Closes: #810519, CVE-2015-8743)
   * ide-ahci-reset-ncq-object-to-unused-on-error-CVE-2016-1568.patch
     (Closes: #810527, CVE-2016-1568)
   * changed build-depends from libpng12-dev to libpng-dev (Closes: #810205)
Checksums-Sha1:
 f2ba62f4401d87bc4cf1ae4700c033eaef560739 5778 qemu_2.5+dfsg-5ubuntu1.dsc
 bfba0223ab3601343712d68fee3ae324638daa30 85176 qemu_2.5+dfsg-5ubuntu1.debian.tar.xz
Checksums-Sha256:
 681646496482e6252fffb59b1cefefeb8740577499ce10dd857996cfc61ae289 5778 qemu_2.5+dfsg-5ubuntu1.dsc
 6df496f52c77a1f2d15979be079a880a7d4fbc02a10229bf49b9203170178fc3 85176 qemu_2.5+dfsg-5ubuntu1.debian.tar.xz
Files:
 723f599138dea9450bec8e6713d729c7 5778 otherosfs optional qemu_2.5+dfsg-5ubuntu1.dsc
 bc758a1d9bcc8667a53f109bb1673ec9 85176 otherosfs optional qemu_2.5+dfsg-5ubuntu1.debian.tar.xz
Original-Maintainer: Debian QEMU Team <pkg-qemu-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCgAGBQJWunqBAAoJEOn+6gaoXj+dFdYIAKeHM3m+/gfTQcsuNirMcF9/
mFDuUrTYzu09F/4/J7AXGtWHd4xeg/5vcCTnw8jrNDCUSuhRl5UGKWbfglipZVsk
uHhwWwH+cTK7m9mmM5/dMXFryEHPvI4GlgQ7Ox2COpbghc5CNEv1YxHBM3SIdau5
ru5ZAThVapzKGaud4Hi8p8exkSOwpYto0yDpWyObQVdDZhhXuM219sKsddJCGjMe
XlhNgovXYzsrTphWHvvqP4Bvd2JaKigLLA1D09CryXZTFzejXxelokNXL0uy6wGN
npNFB3IovmY0bAWWk8vNsGwTdduC+fwbnJj19F0riOsImp3fBCdW1HC13gL3j+A=
=l58l
-----END PGP SIGNATURE-----

More information about the Xenial-changes mailing list