FEDORA-2015-16369 — security update for qemu

stable

qemu-2.3.1-5.fc22

FEDORA-2015-16369 created by crobinso 9 years ago for Fedora 22

Fix typo causing qemu-img to link against entire world (bz #1260996)
CVE-2015-6815: net: e1000: infinite loop issue (bz #1260225)
CVE-2015-6855: ide: divide by zero issue (bz #1261793)
CVE-2015-5278: Infinite loop in ne2000_receive() (bz #1263284)
CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() (bz #1263287)
Make block copy more stable (bz #1264416)
Fix hang at start of live merge for large images (bz #1262901)

Fix emulation of various instructions, required by libm in F22 ppc64 guests.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-16369

This update has been submitted for testing by crobinso.

9 years ago

This update has obsoleted qemu-2.3.1-4.fc22, and has inherited its bugs and notes.

9 years ago

This update has been pushed to testing.

9 years ago

cicku provided feedback 9 years ago

karma

BZ#1263284 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1263287 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1260996 qemu-img requires a whole stack of X and Gtk libraries

BZ#1260080 CVE-2015-6855 Qemu: ide: divide by zero issue

BZ#1261793 Qemu: ide: divide by zero issue [fedora-all]

BZ#1260225 Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

This update has been submitted for stable by crobinso.

9 years ago

This update has been pushed to stable.

9 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

qemu-2.3.1-5.fc22

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260080 CVE-2015-6855 Qemu: ide: divide by zero issue

BZ#1260225 Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1260996 qemu-img requires a whole stack of X and Gtk libraries

BZ#1261793 Qemu: ide: divide by zero issue [fedora-all]

BZ#1263284 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function [fedora-all]

BZ#1263287 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

qemu-2.3.1-5.fc22

Automated Test Results

None