Changelog
qemu (1:3.1+dfsg-8+deb10u5) buster-security; urgency=medium
* display-bochs-fix-pcie-support-CVE-2019-15034.patch
Fix possible buffer overflow in BOCHS display PCI config space
Closes: CVE-2019-15034
* vnc-fix-memory-leak-when-vnc-disconnect-CVE-2019-20382.patch
Fix misuse of libz in VNC disconnect, leading to memory leak
Closes: CVE-2019-20382
* scsi-lsi-exit-infinite-loop-while-executing-script-CVE-2019-12068.patch
Fix possible infinite loop in lsi_execute_script (LSI SCSI adapter)
Closes: CVE-2019-12068
* iscsi-fix-heap-buffer-overflow-in-iscsi_aio_ioctl_cb.patch
Fix heap buffer overflow in iSCSI's iscsi_aio_ioctl_cb()
* slirp-fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch
Fix another use-after-free in ip_reass() in SLIRP code
Closes: CVE-2020-1983
-- Michael Tokarev <email address hidden> Tue, 21 Apr 2020 15:26:24 +0300