~paelzer/ubuntu/+source/qemu:lp-1830243-secure-boot-toleration-bionic

Last commit made on 2019-07-04
Get this branch:
git clone -b lp-1830243-secure-boot-toleration-bionic https://git.launchpad.net/~paelzer/ubuntu/+source/qemu
Only Christian Ehrhardt  can upload to this branch. If you are Christian Ehrhardt  please log in for upload directions.

Branch merges

Branch information

Name:
lp-1830243-secure-boot-toleration-bionic
Repository:
lp:~paelzer/ubuntu/+source/qemu

Recent commits

9c9428a... by Christian Ehrhardt  on 2019-07-04

backport d/p/ubuntu/lp-1830243-s390-bios-Skip-bootmap-signature-entries.patch for qemu 2.11

Signed-off-by: Christian Ehrhardt <email address hidden>

fe241e7... by Christian Ehrhardt  on 2019-07-04

changelog: tolerate guests with secure boot loaders (LP: #1830243)

Signed-off-by: Christian Ehrhardt <email address hidden>

5b3d75a... by Christian Ehrhardt  on 2019-07-04

d/p/ubuntu/lp-1830243-s390-bios-Skip-bootmap-signature-entries.patch: tolerate guests with secure boot loaders (LP: #1830243)

Signed-off-by: Christian Ehrhardt <email address hidden>

14149f3... by Christian Ehrhardt  on 2019-05-22

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.15 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 4a24a0f6ea511f4bdf1c7b0ea1040e9f0d58991f

New changelog entries:
  * d/p/ubuntu/define-ubuntu-machine-types.patch: fix wily machine type being
    broken since 2.11 due to 2.3/2.4 version mismatch in its definition to
    fix migrations from old machines (LP: #1829868).
  * d/p/ubuntu/lp-1830704-s390x-cpumodel-ignore-csske-for-expansion.patch
    toleration for future machines (LP: #1830704

4a24a0f... by Balint Reczey on 2019-05-23

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.14 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: ac956a6f203d9a9e9edb108e78ea02edd27d5bc2

New changelog entries:
  * Add qemu-guest-agent Breaks: for unattended-upgrades versions not being
    able to install it to avoid qemu-guest-agent blocking other security
    updates. (LP: #1823872)

ac956a6... by Steve Beattie on 2019-05-09

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.13 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: a8424635eca42ba153068dda7532c4caa5ae7a6f

New changelog entries:
  * SECURITY UPDATE: Add support for exposing md-clear functionality
    to guests
    - d/p/ubuntu/enable-md-clear.patch
    - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  * SECURITY UPDATE: heap overflow when loading device tree blob
    - d/p/ubuntu/CVE-2018-20815.patch: specify how large the buffer to
      copy the device tree blob into is.
    - CVE-2018-20815
  * SECURITY UPDATE: information leak in SLiRP
    - d/p/ubuntu/CVE-2019-9824.patch: check sscanf result when
      emulating ident.
    - CVE-2019-9824

a842463... by Marc Deslauriers on 2019-03-25

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.12 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 4f01ec452483d37706b1dc717fcdcb5d283eb61d

New changelog entries:
  [ Marc Deslauriers ]
  * SECURITY UPDATE: TOCTTOU in MTP
    - debian/patches/CVE-2018-16872.patch: use O_NOFOLLOW and O_CLOEXEC in
      hw/usb/dev-mtp.c.
    - CVE-2018-16872
  * SECURITY UPDATE: race during file renaming in v9fs_wstat
    - debian/patches/CVE-2018-19489.patch: add locks to hw/9pfs/9p.c.
    - CVE-2018-19489
  * SECURITY UPDATE: out-of-bounds read via i2 commands
    - debian/patches/CVE-2019-3812.patch: add bounds check to
      hw/i2c/i2c-ddc.c.
    - CVE-2019-3812
  * SECURITY UPDATE: heap based buffer overflow in slirp
    - debian/patches/CVE-2019-6778.patch: check data length while emulating
      ident function in slirp/tcp_subr.c.
    - CVE-2019-6778
  [ Christian Ehrhardt ]
  * fix crash when performing block pull on partial cluster (LP: #1818264)
    - d/p/ubuntu/lp-1818264-block-Fix-copy-on-read-crash-with-partial.patch
  * qemu-guest-agent: fix path of fsfreeze-hook (LP: #1820291)
    - d/qemu-guest-agent.install: use correct path for fsfreeze-hook
    - d/qemu-guest-agent.pre{rm|inst}/.postrm: special handling for
      mv_conffile since the new path is a directory in the old package
      version which can not be handled by mv_conffile

4f01ec4... by Christian Ehrhardt  on 2019-01-31

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.10 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 83afeb127eb388ba6f314bc66072a71848a760e0

New changelog entries:
  * d/p/ubuntu/lp-1806104-spapr_pci-Remove-unhelpful-pagesize-warning.patch:
    remove misleading page size warning on qemu-system-ppc64 (LP: #1806104)
  * d/p/ubuntu/lp-1812384-s390x-Return-specification-exception.patch: ensure
    a proper exception on unknown diag 308 subcodes
    (LP: #1812384)
  * d/p/ubuntu/lp-1809083-*: fix backward migration on ppc64el (LP: #1809083)

83afeb1... by Christian Ehrhardt  on 2018-11-15

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.9 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 95e35f20586fa620ed0843acb8759deeb629a3db

New changelog entries:
  * debian/patches/ubuntu/lp1787405-*: Support guest dedicated Crypto
    Adapters on s390x (LP: #1787405)

95e35f2... by Marc Deslauriers on 2018-11-21

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.8 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 28d5083a64da5a48e6719c674eb90fc5e81e31c0

New changelog entries:
  * SECURITY UPDATE: integer overflow in NE2000 NIC emulation
    - debian/patches/CVE-2018-10839.patch: use proper type in
      hw/net/ne2000.c.
    - CVE-2018-10839
  * SECURITY UPDATE: buffer overflow via incoming fragmented datagrams
    - debian/patches/CVE-2018-11806.patch: correct size computation in
      slirp/mbuf.c, slirp/mbuf.h.
    - CVE-2018-11806
  * SECURITY UPDATE: integer overflow via crafted QMP command
    - debian/patches/CVE-2018-12617.patch: check bytes count read by
      guest-file-read in qga/commands-posix.c.
    - CVE-2018-12617
  * SECURITY UPDATE: OOB heap buffer r/w access in NVM Express Controller
    - debian/patches/CVE-2018-16847.patch: check size in hw/block/nvme.c.
    - CVE-2018-16847
  * SECURITY UPDATE: buffer overflow in rtl8139
    - debian/patches/CVE-2018-17958.patch: use proper type in
      hw/net/rtl8139.c.
    - CVE-2018-17958
  * SECURITY UPDATE: buffer overflow in pcnet
    - debian/patches/CVE-2018-17962.patch: use proper type in
      hw/net/pcnet.c.
    - CVE-2018-17962
  * SECURITY UPDATE: DoS via large packet sizes
    - debian/patches/CVE-2018-17963.patch: check size in net/net.c.
    - CVE-2018-17963
  * SECURITY UPDATE: DoS in lsi53c895a
    - debian/patches/CVE-2018-18849.patch: check message length value is
      valid in hw/scsi/lsi53c895a.c.
    - CVE-2018-18849
  * SECURITY UPDATE: Out-of-bounds r/w stack access in ppc64
    - debian/patches/CVE-2018-18954.patch: check size before data buffer
      access in hw/ppc/pnv_lpc.c.
    - CVE-2018-18954
  * SECURITY UPDATE: race condition in 9p
    - debian/patches/CVE-2018-19364-1.patch: use write lock in
      hw/9pfs/cofile.c.
    - debian/patches/CVE-2018-19364-2.patch: use write lock in
      hw/9pfs/9p.c.
    - CVE-2018-19364