[ubuntu-cloud-archive/mitaka-proposed] qemu (Accepted)

[Corey Bryant]

 qemu (1:2.5+dfsg-5ubuntu10.49~cloud0) trusty-mitaka; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 qemu (1:2.5+dfsg-5ubuntu10.49) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: heap overread in iscsi_aio_ioctl_cb
     - debian/patches/CVE-2020-11947.patch: fix heap-buffer-overflow in
       block/iscsi.c.
     - CVE-2020-11947
   * SECURITY UPDATE: use-after-free in e1000e
     - debian/patches/CVE-2020-15859.patch: forbid the reentrant RX in
       net/queue.c.
     - CVE-2020-15859
   * SECURITY UPDATE: out of bounds read in atapi
     - debian/patches/CVE-2020-29443-1.patch: assert that the buffer pointer
       is in range in hw/ide/atapi.c.
     - debian/patches/CVE-2020-29443-2.patch: check logical block address
       and read size in hw/ide/atapi.c.
     - CVE-2020-29443
   * SECURITY UPDATE: use after free in 9p
     - debian/patches/CVE-2021-20181.patch: fully restart unreclaim loop in
       hw/9pfs/virtio-9p.c.
     - CVE-2021-20181

Date: Tue, 09 Feb 2021 12:05:37 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>