New changelog entries:
* d/p/ubuntu/define-ubuntu-machine-types.patch: fix wily machine type being
broken since 2.11 due to 2.3/2.4 version mismatch in its definition to
fix migrations from old machines (LP: #1829868).
* d/p/ubuntu/lp-1830704-s390x-cpumodel-ignore-csske-for-expansion.patch
toleration for future machines (LP: #1830704
New changelog entries:
* Add qemu-guest-agent Breaks: for unattended-upgrades versions not being
able to install it to avoid qemu-guest-agent blocking other security
updates. (LP: #1823872)
New changelog entries:
* SECURITY UPDATE: Add support for exposing md-clear functionality
to guests
- d/p/ubuntu/enable-md-clear.patch
- CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
* SECURITY UPDATE: heap overflow when loading device tree blob
- d/p/ubuntu/CVE-2018-20815.patch: specify how large the buffer to
copy the device tree blob into is.
- CVE-2018-20815
* SECURITY UPDATE: device driver denial of service via NULL pointer
dereference
- d/p/ubuntu/CVE-2019-5008.patch: Define skeleton 'power_mem_read'
routine
- CVE-2019-5008
* SECURITY UPDATE: information leak in SLiRP
- d/p/ubuntu/CVE-2019-9824.patch: check sscanf result when
emulating ident.
- CVE-2019-9824
New changelog entries:
[ Marc Deslauriers ]
* SECURITY UPDATE: multiple pvrdma security issues
- debian/patches/split_pvrdma.patch: split PVRDMA from RDMA in
configure, hw/rdma/Makefile.objs.
- debian/control*: completely disable pvrdma to fix security issues
- CVE-2018-20123
- CVE-2018-20124
- CVE-2018-20125
- CVE-2018-20126
- CVE-2018-20191
- CVE-2018-20216
* SECURITY UPDATE: path traversal issue in MTP
- debian/patches/CVE-2018-16867.patch: check for slash in
hw/usb/dev-mtp.c.
- CVE-2018-16867
* SECURITY UPDATE: TOCTTOU in MTP
- debian/patches/CVE-2018-16872.patch: use O_NOFOLLOW and O_CLOEXEC in
hw/usb/dev-mtp.c.
- CVE-2018-16872
* SECURITY UPDATE: race during file renaming in v9fs_wstat
- debian/patches/CVE-2018-19489.patch: add locks to hw/9pfs/9p.c.
- CVE-2018-19489
* SECURITY UPDATE: out-of-bounds read via i2 commands
- debian/patches/CVE-2019-3812.patch: add bounds check to
hw/i2c/i2c-ddc.c.
- CVE-2019-3812
* SECURITY UPDATE: heap based buffer overflow in slirp
- debian/patches/CVE-2019-6778.patch: check data length while emulating
ident function in slirp/tcp_subr.c.
- CVE-2019-6778
[ Christian Ehrhardt ]
* qemu-guest-agent: fix path of fsfreeze-hook (LP: #1820291)
- d/qemu-guest-agent.install: use correct path for fsfreeze-hook
- d/qemu-guest-agent.pre{rm|inst}/.postrm: special handling for
mv_conffile since the new path is a directory in the old package
version which can not be handled by mv_conffile
Merged
into
ubuntu/+source/qemu:ubuntu/cosmic-devel
at
revision 561b5e275c415c66b614d01f18e60e66721fa64c
