Commit - rpms/qemu - cce96bf59aa0ca7cbbe1e1c5d75b6d282f7a26bc

    Fix crash in qemu_spice_create_display (bz #1163047)
    Fix qemu-img map crash for unaligned image (bz #1229394)
    CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path (bz #1230536)
    CVE-2015-3214: i8254: out-of-bounds memory access (bz #1243728)
    CVE-2015-5158: scsi stack buffer overflow (bz #1246025)
    CVE-2015-5154: ide: atapi: heap overflow during I/O buffer memory access (bz #1247141)
    CVE-2015-5166: BlockBackend object use after free issue (bz #1249758)
    CVE-2015-5745: buffer overflow in virtio-serial (bz #1251160)
    CVE-2015-5165: rtl8139 uninitialized heap memory information leakage to guest (bz #1249755)

0003-qcow2-Handle-EAGAIN-returned-from-update_refcount.patch ~~0001-qcow2-Handle-EAGAIN-returned-from-update_refcount.patch~~

file renamed

+3 -6

0004-spice-display-fix-segfault-in-qemu_spice_create_upda.patch

file added

+49

0005-raw-posix-Fix-.bdrv_co_get_block_status-for-unaligne.patch

file added

+41

0006-pcnet-force-the-buffer-access-to-be-in-bounds-during.patch

file added

+46

0007-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch

file added

+40

0008-scsi-fix-buffer-overflow-in-scsi_req_parse_cdb-CVE-2.patch

file added

+46

0009-ide-Check-array-bounds-before-writing-to-io_buffer-C.patch

file added

+75

0010-ide-atapi-Fix-START-STOP-UNIT-command-completion.patch

file added

+26

0011-ide-Clear-DRQ-after-handling-all-expected-accesses.patch

file added

+69

0012-Fix-release_drive-on-unplugged-devices-pci_piix3_xen.patch

file added

+41

0013-virtio-serial-fix-ANY_LAYOUT.patch

file added

+29

0014-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch

file added

+85

0015-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch

file added

+376

0016-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch

file added

+42

0017-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch

file added

+55

0018-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch

file added

+36

0019-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch

file added

+37

0020-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch

file added

+34

qemu.spec

file modified

+46 -6

rpms / qemu

Source Code

cce96bf Fix crash in qemu_spice_create_display (bz #1163047)

Authored and Committed by crobinso 8 years ago

`cce96bf` Fix crash in qemu_spice_create_display (bz #1163047)