FEDORA-2015-16368 — security update for qemu

stable

qemu-2.1.3-11.fc21

FEDORA-2015-16368 created by crobinso 9 years ago for Fedora 21

CVE-2015-6815: net: e1000: infinite loop issue (bz #1260225)
CVE-2015-6855: ide: divide by zero issue (bz #1261793)
CVE-2015-5278: Infinite loop in ne2000_receive() (bz #1263284)
CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() (bz #1263287)
Make block copy more stable (bz #1264416)
Fix hang at start of live merge for large images (bz #1262901)

CVE-2015-5225: heap memory corruption in vnc_refresh_server_surface (bz #1255899)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-16368

This update has been submitted for testing by crobinso.

9 years ago

This update has obsoleted qemu-2.1.3-10.fc21, and has inherited its bugs and notes.

9 years ago

This update has been pushed to testing.

9 years ago

adamwill commented & provided feedback 9 years ago

karma

VMs run fine

filiperosset commented & provided feedback 9 years ago

karma

no regressions noted

This update has been submitted for stable by crobinso.

9 years ago

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

qemu-2.1.3-11.fc21

BZ#1255896 CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface

BZ#1255899 CVE-2015-5225 Qemu: ui: vnc: heap memory corruption in vnc_refresh_server_surface [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260080 CVE-2015-6855 Qemu: ide: divide by zero issue

BZ#1260225 Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1261793 Qemu: ide: divide by zero issue [fedora-all]

BZ#1262901 Backport qemu patch "sleep periodically" to FC21/FC22

BZ#1263284 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function [fedora-all]

BZ#1263287 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1264416 Make block copy more stable

qemu-2.1.3-11.fc21

Automated Test Results

None