FEDORA-2015-16369 — security update for qemu

stable

qemu-2.3.1-5.fc22

FEDORA-2015-16369 created by crobinso 7 years ago for Fedora 22

Fix typo causing qemu-img to link against entire world (bz #1260996)
CVE-2015-6815: net: e1000: infinite loop issue (bz #1260225)
CVE-2015-6855: ide: divide by zero issue (bz #1261793)
CVE-2015-5278: Infinite loop in ne2000_receive() (bz #1263284)
CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() (bz #1263287)
Make block copy more stable (bz #1264416)
Fix hang at start of live merge for large images (bz #1262901)

Fix emulation of various instructions, required by libm in F22 ppc64 guests.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2015-16369

This update has been submitted for testing by crobinso.

7 years ago

This update has obsoleted qemu-2.3.1-4.fc22, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

cicku provided feedback 7 years ago

karma

BZ#1263284 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1263287 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1260996 qemu-img requires a whole stack of X and Gtk libraries

BZ#1260080 CVE-2015-6855 Qemu: ide: divide by zero issue

BZ#1261793 Qemu: ide: divide by zero issue [fedora-all]

BZ#1260225 Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

This update has been submitted for stable by crobinso.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

qemu-2.3.1-5.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260080 CVE-2015-6855 Qemu: ide: divide by zero issue

BZ#1260225 Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1260996 qemu-img requires a whole stack of X and Gtk libraries

BZ#1261793 Qemu: ide: divide by zero issue [fedora-all]

BZ#1263284 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function [fedora-all]

BZ#1263287 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

qemu-2.3.1-5.fc22

How to install

Automated Test Results