QEMU 2.6.2 Uprev

Owned by Ross Philipson
Last updated: Oct 06, 2016
2 min read

CVE/XSA/BP

Git history off of the stable-2.6 branch.

cve-2014-3615-vbe-rework-sanity-checks.patch (drop)

commit 5fd7fc8db92adea953ecf5917168989a28e8871f
Merge: fd884c0 ab9509c
Author: Peter Maydell <peter.maydell@linaro.org>
Date: Fri Sep 5 12:26:33 2014 +0100

commit ab9509cceabef28071e41bdfa073083859c949a7
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Wed Sep 3 15:50:08 2014 +0200

commit c1b886c45dc70f247300f549dce9833f3fa2def5
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue Aug 26 15:35:23 2014 +0200

xsa-126-unmediated-pci-command-register-access-in-qemu.patch (drop)

commit 81b23ef82cd1be29ca3d69ab7e98b5b5e55926ce
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Mar 31 15:18:03 2015 +0100

xsa-128-potential-unintended-writes-to-host-msi-message-data-field-via-qemu.patch (drop)

commit 5c83b2f5b4b956e91dd6e5711f14df7ab800aefb
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Jun 2 15:07:00 2015 +0000

xsa-129-pci-msi-mask-bits-inadvertently-exposed-to-guests.patch (drop)

commit 7611dae8a69f0f1775ba1a9a942961c2aa10d88e
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Jun 2 15:07:00 2015 +0000

xsa-130-guest-triggerable-qemu-msi-x-pass-through-error-messages.patch (drop)

commit b38ec5ee7a581776bbce0bdaecb397632c3c4791
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Jun 2 15:07:00 2015 +0000

xsa-131-unmediated-pci-register-access-in-qemu.patch (drop)

commit c25bbf1545a53ac051f9e51d4140e397660c10ae
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Jun 2 15:07:01 2015 +0000

To...

commit d1d35cf4ffb6a60a356193397919e83306d0bb74
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Jun 2 15:07:01 2015 +0000

xsa-133-privilege-escalation-via-emulated-floppy-disk-drive.patch (drop)

commit e907746266721f305d67bc0718795fedee2e824c
Author: Petr Matousek <pmatouse@redhat.com>
Date: Wed May 6 09:48:59 2015 +0200

xsa-135-heap-overflow-in-qemu-pcnet-controller.patch (drop)

commit 9f7c594c006289ad41169b854d70f5da6e400a2a
Author: Petr Matousek <pmatouse@redhat.com>
Date: Sun May 24 10:53:44 2015 +0200

xsa-138-qemu-heap-overflow-flaw-while-processing-certain-atapi-commands.patch (drop)

commit e40db4c6d391419c0039fe274c74df32a6ca1a28
Merge: f793d97 cb72cba
Author: Peter Maydell <peter.maydell@linaro.org>
Date: Mon Jul 27 13:10:00 2015 +0100

commit d2ff85854512574e7209f295e87b0835d5b032c6
Author: Kevin Wolf <kwolf@redhat.com>
Date: Sun Jul 26 23:42:53 2015 -0400

xsa-139-use-after-free-in-qemu-xen-block-unplug-protocol.patch (drop)

CVE-2015-5166 and XSA-139 not found, used text from patch: pci_piix3_xen_ide_unplug

commit 6cd387833d05e8ad31829d97e474dc420625aed9
Author: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Date: Mon Aug 3 13:56:57 2015 +0000

xsa-140-qemu-leak-of-uninitialized-heap-memory-in-rtl8139-device-model.patch (drop)

commit 2a3612ccc1fa9cea77bd193afbfe21c77e7e91ef
Merge: bd80b59 8357946
Author: Peter Maydell <peter.maydell@linaro.org>
Date: Mon Aug 3 13:09:10 2015 +0100

To...

commit 39b8e7dcaf04cbdb926b478f825b160d852752b5
Author: Stefan Hajnoczi <stefanha@redhat.com>
Date: Wed Jul 15 17:13:32 2015 +0100

xsa-155-paravirtualized-drivers-incautious-about-shared-memory-contents.patch (drop)

commit 81b23ef82cd1be29ca3d69ab7e98b5b5e55926ce
Author: Jan Beulich <jbeulich@suse.com>
Date: Tue Mar 31 15:18:03 2015 +0100

xsa-162-heap-buffer-overflow-vulnerability-in-pcnet-emulator.patch (drop)

commit 84942979de3b7204ff53dbd263f8919897c779b2
Merge: a5582ea 52b4bb7
Author: Peter Maydell <peter.maydell@linaro.org>
Date: Mon Dec 7 14:18:31 2015 +0000

commit 837f21aacf5a714c23ddaadbbc5212f9b661e3f7
Author: Prasad J Pandit <pjp@fedoraproject.org>
Date: Fri Nov 20 11:50:31 2015 +0530

xsa-179-banked-access-to-vga-memory-uses-inconsistent-bounds-checks.patch (drop)

commit 7ff5dc445d6bb392f9fb3d0a254ef9071304780b
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue May 17 10:54:54 2016 +0200

commit 53db932604dfa7bb9241d132e0173894cf54261c
Merge: 975eb6a fd3c136
Author: Peter Maydell <peter.maydell@linaro.org>
Date: Mon May 9 13:42:25 2016 +0100

commit fd3c136b3e1482cd0ec7285d6bc2a3e6a62c38d7
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue Apr 26 14:48:06 2016 +0200

commit 3bf1817079bb0d80c0d8a86a7c7dd0bfe90eb82e
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue Apr 26 08:49:10 2016 +0200

0031-bp-rt8139-net-queue-flush-fix-00b7ade807b5ce6779ddd86ce29c5521ec5c529a.patch (drop)

commit 00b7ade807b5ce6779ddd86ce29c5521ec5c529a
Author: Stefan Hajnoczi <stefanha@redhat.com>
Date: Wed May 22 14:50:18 2013 +0200

0032-bp-hub-net-queue-flush-fix-199ee608f0d08510b5c6c37f31a7fbff211d63c4.patch (drop)

commit 199ee608f0d08510b5c6c37f31a7fbff211d63c4
Author: Luigi Rizzo <rizzo@iet.unipi.it>
Date: Tue Feb 5 17:53:31 2013 +0100

vbe-make-bochs-dispi-interface-return-the-correct-me.patch (drop)

commit 54a85d462447c1cb8a1638578a7fd086350b4d2d
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue Aug 26 14:16:30 2014 +0200

vga-add-sr_vbe-register-set.patch (drop)

commit 7ff5dc445d6bb392f9fb3d0a254ef9071304780b
Author: Gerd Hoffmann <kraxel@redhat.com>
Date: Tue May 17 10:54:54 2016 +0200

...

(cherry picked from commit 94ef4f337fb614f18b765a8e0e878a4c23cdedcd)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>