[ubuntu-cloud-archive/stein-proposed] qemu (Accepted)

[Corey Bryant]

 qemu (1:3.1+dfsg-2ubuntu3.1~cloud0) bionic-stein; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 qemu (1:3.1+dfsg-2ubuntu3.1) disco-security; urgency=medium
 .
   * SECURITY UPDATE: Add support for exposing md-clear functionality
     to guests
     - d/p/ubuntu/enable-md-clear.patch
     - d/p/ubuntu/enable-md-no.patch
     - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
   * SECURITY UPDATE: heap overflow when loading device tree blob
     - d/p/ubuntu/CVE-2018-20815.patch: specify how large the buffer to
       copy the device tree blob into is.
     - CVE-2018-20815
   * SECURITY UPDATE: device driver denial of service via NULL pointer
     dereference
     - d/p/ubuntu/CVE-2019-5008.patch: Define skeleton 'power_mem_read'
       routine
     - CVE-2019-5008
   * SECURITY UPDATE: information leak in SLiRP
     - d/p/ubuntu/CVE-2019-9824.patch: check sscanf result when
       emulating ident.
     - CVE-2019-9824

Date: Tue, 14 May 2019 18:21:31 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>