qemu-kvm (1.0+noroms-0ubuntu14.23) precise-security; urgency=medium
* SECURITY UPDATE: heap overflow in PCNET controller
- debian/patches/CVE-2015-3209-pre.patch: fix negative array index read
in hw/pcnet.c.
- debian/patches/CVE-2015-3209.patch: check bounds in hw/pcnet.c.
- CVE-2015-3209
* SECURITY UPDATE: unsafe /tmp filename use by slirp
- debian/patches/CVE-2015-4037.patch: use mkdtemp in net/slirp.c.
- CVE-2015-4037
Date: 2015-06-09 15:37:14.109316+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/+source/qemu-kvm/1.0+noroms-0ubuntu14.23
Sorry, changesfile not available.
--
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
