Ubuntu
qemu-kvm package

qemu-kvm 1.0+noroms-0ubuntu14.28 source package in Ubuntu

Changelog

qemu-kvm (1.0+noroms-0ubuntu14.28) precise-security; urgency=medium

  * SECURITY UPDATE: denial of service via multiple eof_timers in ohci
    - debian/patches/CVE-2016-2391.patch: allocate timer only once in
      hw/usb-ohci.c.
    - CVE-2016-2391
  * SECURITY UPDATE: denial of service in in remote NDIS control message
    handling
    - debian/patches/CVE-2016-2392.patch: check USB configuration
      descriptor object in hw/usb-net.c.
    - CVE-2016-2392
  * SECURITY UPDATE: denial of service or host information leak in USB Net
    device emulation support
    - debian/patches/CVE-2016-2538.patch: check RNDIS buffer offsets and
      length in hw/usb-net.c.
    - CVE-2016-2538
  * SECURITY UPDATE: denial of service via infinite loop in ne2000
    - debian/patches/CVE-2016-2841.patch: heck ring buffer control
      registers in hw/ne2000.c.
    - CVE-2016-2841
  * SECURITY UPDATE: denial of service via payload length in crafted packet
    - debian/patches/CVE-2016-2857.patch: check packet payload length in
      net/checksum.c.
    - CVE-2016-2857
  * SECURITY UPDATE: arbitrary host code execution via VGA module
    - debian/patches/CVE-2016-3710.patch: fix banked access bounds checking
      in hw/vga.c.
    - CVE-2016-3710
  * SECURITY UPDATE: denial of service via VGA module
    - debian/patches/CVE-2016-3712.patch: make sure vga register setup for
      vbe stays intact in hw/vga.c.
    - CVE-2016-3712
  * SECURITY UPDATE: denial of service in Luminary Micro Stellaris Ethernet
    - debian/patches/CVE-2016-4001.patch: check packet length against
      receive buffer in hw/stellaris_enet.c.
    - CVE-2016-4001
  * SECURITY UPDATE: denial of sevice and possible code execution in
    MIPSnet
    - debian/patches/CVE-2016-4002.patch: check size in hw/mipsnet.c.
    - CVE-2016-4002
  * SECURITY UPDATE: denial of service via infinite loop in in usb_ehci
    - debian/patches/CVE-2016-4037.patch: apply limit to iTD/sidt
      descriptors in hw/usb-ehci.c.
    - CVE-2016-4037

 -- Marc Deslauriers <email address hidden>  Wed, 11 May 2016 08:24:36 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
qemu-kvm_1.0+noroms.orig.tar.gz 4.7 MiB 23eecd98460012904455fc94036ff58b99719a595447dc747c6933cc2b4375bf
qemu-kvm_1.0+noroms-0ubuntu14.28.diff.gz 140.8 KiB b249f530a411cfcd4359a60e2b79af4ab222f12770325b086b72d23a98bf7470
qemu-kvm_1.0+noroms-0ubuntu14.28.dsc 2.2 KiB d7593ae6e31858c793e1146fffafbe34f0bf6953b168e6ec5d9fadf018e7d80e

View changes file

Binary packages built by this source

kvm: dummy transitional package from kvm to qemu-kvm

 This transitional package helps users transition from the kvm package to the
 qemu-kvm package. Once this package and its dependencies are installed you
 can safely remove it.

qemu: dummy transitional package from qemu to qemu-kvm

 This transitional package helps users transition from the qemu package to the
 qemu-kvm package. Once this package and its dependencies are installed you
 can safely remove it.

qemu-common: qemu common functionality (bios, documentation, etc)

 This package pulls in the various binary bios rom blobs needed to boot
 the various emulated architectures, as well as the documentation.

qemu-kvm: Full virtualization on i386 and amd64 hardware

 Using KVM, one can run multiple virtual PCs, each running unmodified Linux or
 Windows images. Each virtual machine has private virtualized hardware: a
 network card, disk, graphics adapter, etc.
 .
 KVM (for Kernel-based Virtual Machine) is a full virtualization solution for
 Linux hosts on x86 (32 and 64-bit) hardware.
 .
 KVM is intended for systems where the processor has hardware support for
 virtualization, see below for details. All combinations of 32-bit and 64-bit
 host and guest systems are supported, except 64-bit guests on 32-bit hosts.
 .
 KVM requires your system to support hardware virtualization, provided by AMD's
 SVM capability or Intel's VT. To find out if your processor has the necessary
 support:
 .
   egrep "flags.*:.*(svm|vmx)" /proc/cpuinfo
 .
 If it prints anything, the processor provides hardware virtualization
 support and is suitable for use with KVM. Without hardware support, you can
 use qemu emulation instead.
 .
 KVM consists of two loadable kernel modules (kvm.ko and either kvm-amd.ko or
 kvm-intel.ko) and a userspace component. This package contains the userspace
 component, and you can get the kernel modules from the standard kernel images.
 .
 This package contains support for running virtualized and emulated x86 and
 x86-64 machines only. Support for other architectures is provided by the
 qemu-linaro source package.

qemu-kvm-dbgsym: debug symbols for package qemu-kvm

 Using KVM, one can run multiple virtual PCs, each running unmodified Linux or
 Windows images. Each virtual machine has private virtualized hardware: a
 network card, disk, graphics adapter, etc.
 .
 KVM (for Kernel-based Virtual Machine) is a full virtualization solution for
 Linux hosts on x86 (32 and 64-bit) hardware.
 .
 KVM is intended for systems where the processor has hardware support for
 virtualization, see below for details. All combinations of 32-bit and 64-bit
 host and guest systems are supported, except 64-bit guests on 32-bit hosts.
 .
 KVM requires your system to support hardware virtualization, provided by AMD's
 SVM capability or Intel's VT. To find out if your processor has the necessary
 support:
 .
   egrep "flags.*:.*(svm|vmx)" /proc/cpuinfo
 .
 If it prints anything, the processor provides hardware virtualization
 support and is suitable for use with KVM. Without hardware support, you can
 use qemu emulation instead.
 .
 KVM consists of two loadable kernel modules (kvm.ko and either kvm-amd.ko or
 kvm-intel.ko) and a userspace component. This package contains the userspace
 component, and you can get the kernel modules from the standard kernel images.
 .
 This package contains support for running virtualized and emulated x86 and
 x86-64 machines only. Support for other architectures is provided by the
 qemu-linaro source package.

qemu-utils: qemu utilities

 This package provides some utilities for which full qemu-kvm is not needed,
 in particular qemu-nbd and qemu-img.

qemu-utils-dbgsym: debug symbols for package qemu-utils

 This package provides some utilities for which full qemu-kvm is not needed,
 in particular qemu-nbd and qemu-img.