{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Qemu: nvram: OOB r/w access in processing firmware configurations\nCVE-2016-1714 (#1296080)", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-03-09 22:58:25", "date_modified": null, "date_approved": null, "date_testing": "2016-03-10 15:24:11", "date_stable": "2016-03-19 21:03:15", "alias": "FEDORA-2016-38b20aa50f", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-03-19 21:03:15", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2016-38b20aa50f", "title": "xen-4.5.2-9.fc22", "version_hash": "d1eaec7567f2b1a396fea210d339c2c8e3eac4ac", "release": {"name": "F22", "long_name": "Fedora 22", "version": "22", "id_prefix": "FEDORA", "branch": "f22", "dist_tag": "f22", "stable_tag": "f22-updates", "testing_tag": "f22-updates-testing", "candidate_tag": "f22-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f22-updates-testing-pending", "pending_stable_tag": "f22-updates-pending", "override_tag": "f22-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"name": "myoung", "email": "m.a.young@durham.ac.uk", "id": 129, "avatar": "https://seccdn.libravatar.org/avatar/cafef3050bdaacd4f890e9dfb2c45ae779cd95d6f836095f281368927146a63a?s=24&d=retro", "openid": "myoung.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by myoung. ", "timestamp": "2016-03-09 22:58:25", "update_id": 52437, "user_id": 91, "id": 398503, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-03-10 16:53:10", "update_id": 52437, "user_id": 91, "id": 398927, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2016-03-17 18:00:23", "update_id": 52437, "user_id": 91, "id": 402331, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by myoung. ", "timestamp": "2016-03-17 20:52:51", "update_id": 52437, "user_id": 91, "id": 402432, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2016-03-19 21:28:40", "update_id": 52437, "user_id": 91, "id": 403492, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "xen-4.5.2-9.fc22", "signed": true, "release_id": 12, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1283934, "title": "CVE-2016-1922 Qemu: i386: null pointer dereference in vapic_write()", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 380671, "bug_id": 1283934, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-01-23 09:40:17", "update_id": 49292, "user_id": 2393, "id": 380671, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 381217, "bug_id": 1283934, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me...", "timestamp": "2016-01-24 15:15:02", "update_id": 49292, "user_id": 197, "id": 381217, "testcase_feedback": [], "user": {"name": "vinumoses", "email": "vinumoses@gmail.com", "id": 197, "avatar": "https://seccdn.libravatar.org/avatar/ff952202461208fbcabbc725499a1ced54046c0553cd39115c456163354791ad?s=24&d=retro", "openid": "vinumoses.id.fedoraproject.org", "groups": [{"name": ""}]}}}]}, {"bug_id": 1284008, "title": "CVE-2015-8613 Qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 380671, "bug_id": 1284008, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-01-23 09:40:17", "update_id": 49292, "user_id": 2393, "id": 380671, "testcase_feedback": [], "user": {"name": "mastaiza", "email": "mastaizawfm@gmail.com", "id": 2393, "avatar": "https://seccdn.libravatar.org/avatar/ff005c474a9f0bdbc24950d50dc51aba554d23bb517f4c95fcf505be5334aaf2?s=24&d=retro", "openid": "mastaiza.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 381217, "bug_id": 1284008, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me...", "timestamp": "2016-01-24 15:15:02", "update_id": 49292, "user_id": 197, "id": 381217, "testcase_feedback": [], "user": {"name": "vinumoses", "email": "vinumoses@gmail.com", "id": 197, "avatar": "https://seccdn.libravatar.org/avatar/ff952202461208fbcabbc725499a1ced54046c0553cd39115c456163354791ad?s=24&d=retro", "openid": "vinumoses.id.fedoraproject.org", "groups": [{"name": ""}]}}}]}, {"bug_id": 1292767, "title": "CVE-2016-1922 xen: qemu: Null pointer dereference in vapic_write() [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1293305, "title": "CVE-2015-8613 xen: qemu: Stack-based buffer overflow in megasas_ctrl_get_info [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1296060, "title": "CVE-2016-1714 Qemu: nvram: OOB r/w access in processing firmware configurations", "security": true, "parent": true, "feedback": []}, {"bug_id": 1296080, "title": "CVE-2016-1714 xen: Qemu: nvram: OOB r/w access in processing firmware configurations [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1296567, "title": "CVE-2016-2857 Qemu: net: out of bounds read in net_checksum_calculate()", "security": true, "parent": true, "feedback": []}, {"bug_id": 1298570, "title": "CVE-2016-1981 Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 391324, "bug_id": 1298570, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2016-02-20 23:18:40", "update_id": 50938, "user_id": 435, "id": 391324, "testcase_feedback": [], "user": {"name": "dfateyev", "email": "denis@fateyev.com", "id": 435, "avatar": "https://seccdn.libravatar.org/avatar/32aa9682b20e7044516bb2fb2ac9395ef81429d5451cd25da3f13cb806ced74b?s=24&d=retro", "openid": "dfateyev.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1299455, "title": "Qemu: usb ehci out-of-bounds read in ehci_process_itd", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 391324, "bug_id": 1299455, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2016-02-20 23:18:40", "update_id": 50938, "user_id": 435, "id": 391324, "testcase_feedback": [], "user": {"name": "dfateyev", "email": "denis@fateyev.com", "id": 435, "avatar": "https://seccdn.libravatar.org/avatar/32aa9682b20e7044516bb2fb2ac9395ef81429d5451cd25da3f13cb806ced74b?s=24&d=retro", "openid": "dfateyev.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "trust admins"}]}}}]}, {"bug_id": 1299996, "title": "CVE-2016-1981 xen: qemu-kvm: Infinite loop and out-of-bounds transfer start in start_xmit() and e1000_receive_iov() [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1300235, "title": "xen: qemu: Out-of-bounds read in usb-echi [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1300771, "title": "CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault", "security": true, "parent": true, "feedback": []}, {"bug_id": 1301643, "title": "CVE-2016-2198 Qemu: usb: ehci null pointer dereference in ehci_caps_write", "security": true, "parent": true, "feedback": []}, {"bug_id": 1302299, "title": "CVE-2016-2392 Qemu: usb: null pointer dereference in remote NDIS control message handling", "security": true, "parent": true, "feedback": []}, {"bug_id": 1303106, "title": "CVE-2016-2841 Qemu: net: ne2000: infinite loop in ne2000_receive", "security": true, "parent": true, "feedback": []}, {"bug_id": 1303120, "title": "CVE-2016-2538 Qemu: usb: integer overflow in remote NDIS control message handling", "security": true, "parent": true, "feedback": []}, {"bug_id": 1303135, "title": "CVE-2016-2198 xen: Qemu: usb: ehci null pointer dereference in ehci_caps_write [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1304048, "title": "xen: Qemu: net: ne2000: infinite loop in ne2000_receive [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1304794, "title": "CVE-2016-2391 Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference", "security": true, "parent": true, "feedback": []}, {"bug_id": 1305816, "title": "CVE-2016-2538 xen: qemu: Integer overflow in usb module causing memory leak and DoS [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1307116, "title": "CVE-2016-2392 xen: qemu: Null pointer dereference in usb module [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1308882, "title": "CVE-2016-2391 xen: qemu: Holding multiple eof_timers at the same time in ohci usb mode leads to SIGSEGV [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1309565, "title": "xen: qemu: Out-of-bounds read in net_checksum_calculate() [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1313273, "title": "xen: qemu: Segmentation fault in address_space_rw [fedora-all]", "security": true, "parent": false, "feedback": []}, {"bug_id": 1314676, "title": "CVE-2016-2858 Qemu: rng-random: arbitrary stack based allocation leading to corruption", "security": true, "parent": true, "feedback": []}, {"bug_id": 1314678, "title": "xen: Qemu: rng-random: arbitrary stack based allocation leading to corruption [fedora-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-2016-38b20aa50f", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}