[ubuntu-cloud-archive/ocata-updates] qemu (Accepted)

[Corey Bryant]

 qemu (1:2.8+dfsg-3ubuntu2.9~cloud6) xenial-ocata; urgency=medium
 .
   * SECURITY UPDATE: Add support for exposing md-clear functionality
     to guests
     - d/p/ubuntu/enable-md-clear.patch
     - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
   * SECURITY UPDATE: heap overflow when loading device tree blob
     - d/p/ubuntu/CVE-2018-20815.patch: specify how large the buffer to
       copy the device tree blob into is.
     - CVE-2018-20815
   * SECURITY UPDATE: information leak in SLiRP
     - d/p/ubuntu/CVE-2019-9824.patch: check sscanf result when
       emulating ident.
     - CVE-2019-9824
   * d/p/ubuntu/fix-virtio-net-regression.patch: Fix regression of failing qemu
     guest networking (LP: #1829380).

Date: Thu, 16 May 2019 07:54:14 -0400
Changed-By: Corey Bryant <corey.bryant at canonical.com>
Signed-By: Corey Bryant <corey.bryant at canonical.com> 
Published-By: Corey Bryant <corey.bryant at canonical.com>