Hi Serge,
I keep getting the crash notification due to kvm crashes with the same
bug title as this one. I see that the status is Fix Released, I'm on
precise and fully up-to-date.
My package is:
ii qemu-kvm 1.0+noroms-0ubuntu14.14
Full virtualization on i386 and amd64 hardware
which seems the correct one.
However, from the changelog I cannot see anything that seems related to this
bug fix:
qemu-kvm (1.0+noroms-0ubuntu14.14) precise-security; urgency=medium
* SECURITY UPDATE: arbitrary code execution via MAC address table update
- debian/patches/CVE-2014-0150.patch: fix overflow in hw/virtio-net.c.
- CVE-2014-0150
* SECURITY UPDATE: denial of service and possible code execution via
smart self test counter
- debian/patches/CVE-2014-2894.patch: correct self-test count in
hw/ide/core.c.
- CVE-2014-2894
-- Marc Deslauriers <marc.deslauri...@ubuntu.com> Fri, 25 Apr 2014
17:37:13 -0400
qemu-kvm (1.0+noroms-0ubuntu14.13) precise-security; urgency=medium
* SECURITY UPDATE: privilege escalation via REPORT LUNS
- debian/patches/CVE-2013-4344.patch: support more than 256 LUNS in
hw/scsi-bus.c, hw/scsi.h.
- CVE-2013-4344
-- Marc Deslauriers <marc.deslauri...@ubuntu.com> Tue, 28 Jan 2014
09:08:09 -0500
(the other entries are older than these ones)
Has this fix really been released to precise?
Thank you!
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-4344
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-0150
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-2894
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1303926
Title:
qemu-system-x86_64 crashed with SIGABRT
To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1303926/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
