Change logs for qemu source package in Wheezy

  • qemu (1.1.2+dfsg-6a+deb7u12) wheezy-security; urgency=high
    
      * applied 3 patches from upstream to fix virtio-net
        possible remote DoS (Closes: #799452 CVE-2015-7295)
      * pcnet-add-check-to-validate-receive-data-size-CVE-2015-7504.patch
        (Closes: #806742, CVE-2015-7504)
      * pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch
        (Closes: #806741, CVE-2015-7512)
      * eepro100-prevent-two-endless-loops-CVE-2015-8345.patch
        (Closes: #806373, CVE-2015-8345)
      * vnc-avoid-floating-point-exception-CVE-2015-8504.patch
        (Closes: #808130, CVE-2015-8504)
      * ehci-make-idt-processing-more-robust-CVE-2015-8558.patch
        (Closes: #808144, CVE-2015-8558)
      * net-ne2000-fix-bounds-check-in-ioport-operations-CVE-2015-8743.patch
        (Closes: #810519, CVE-2015-8743)
      * ide-ahci-reset-ncq-object-to-unused-on-error-CVE-2016-1568.patch
        (Closes: #810527, CVE-2016-1568)
      * fw_cfg-add-check-to-validate-current-entry-value-CVE-2016-1714.patch
        (Closes: CVE-2016-1714)
      * i386-avoid-null-pointer-dereference-CVE-2016-1922.patch
        (Closes: #811201, CVE-2016-1922)
    
     -- Michael Tokarev <email address hidden>  Mon, 01 Feb 2016 23:53:18 +0300
  • qemu (1.1.2+dfsg-6a+deb7u8) wheezy-security; urgency=high
    
      * slirp-use-less-predictable-directory-name-in-tmp-CVE-2015-4037.patch
        (Closes: CVE-2015-4037)
      * pcnet-force-buffer-access-to-be-in-bounds-CVE-2015-3209.patch
        with preparation bugfix pcnet-fix-negative-array-index-read.patch
        from upstream (Closes: #788460 CVE-2015-3209)
    
     -- Michael Tokarev <email address hidden>  Fri, 12 Jun 2015 09:51:17 +0300
  • qemu (1.1.2+dfsg-6a+deb7u6) wheezy-security; urgency=high
    
    
      * apply upstream patches for CVE-2014-8106 (buffer overflow
        in cirrus vga emulation) (Closes: CVE-2014-8106)
    
     -- Michael Tokarev <email address hidden>  Wed, 03 Dec 2014 23:46:51 +0300
  • qemu (1.1.2+dfsg-6a+deb7u4) wheezy-security; urgency=medium
    
    
      * image-format-validation patch series backported from 2.0, closing
        CVE-2014-0142, CVE-2014-0143, CVE-2014-0144, CVE-2014-0145,
        CVE-2014-0146, CVE-2014-0147, CVE-2014-0222, CVE-2014-0223
        (Closes: #742730)
      * slirp-udp-fix-NULL-pointer-deref-uninit-socket-CVE-2014-3640.patch
        closing CVE-2014-3640 (Closes: #762532)
      * spice-make-sure-we-don-t-overflow-ssd-buf-CVE-2014-3615.patch and
        vbe-rework-sanity-checks-CVE-2014-3615.patch closing CVE-2014-3615
    
     -- Michael Tokarev <email address hidden>  Tue, 20 May 2014 09:49:42 +0400
  • qemu (1.1.2+dfsg-6a+deb7u3) wheezy-security; urgency=high
    
    
      * ide-correct-improper-smart-self-test-counter-reset-CVE-2014-2894.patch
        (Closes: #745157 CVE-2014-2894)
      * scsi-allocate-SCSITargetReq-r-buf-dynamically-CVE-2013-4344.patch
        (Closes: #725944 CVE-2013-4344)
    
     -- Michael Tokarev <email address hidden>  Wed, 14 May 2014 16:08:52 +0400
  • qemu (1.1.2+dfsg-6a+deb7u2) stable; urgency=medium
    
    
      [ Gabriele Giacone ]
      * Fix crash booting GNU/Hurd on both hwaccel systems without --enable-kvm
        option and on non-hwaccel ones (Closes: #719633).
      * Fix crash booting GNU/Hurd with QEMU multiboot options (Closes: #741873).
    
     -- Michael Tokarev <email address hidden>  Sat, 19 Apr 2014 09:21:00 +0400
  • qemu (1.1.2+dfsg-6a) unstable; urgency=low
    
    
      * reupload to remove two unrelated files slipped in debian/
    
     -- Michael Tokarev <email address hidden>  Mon, 18 Mar 2013 10:09:37 +0400
  • qemu (1.1.2+dfsg-5) unstable; urgency=low
    
    
      * fix USB regression introduced in 1.1 (Closes: #683983)
        uhci-don-t-queue-up-packets-after-one-with-the-SPD-flag-set.patch
        Big thanks to Peter Schaefer (https://bugs.launchpad.net/bugs/1033727)
        for the help identifying the fix.
    
     -- Michael Tokarev <email address hidden>  Mon, 14 Jan 2013 12:20:29 +0400
  • qemu (1.1.2+dfsg-3) unstable; urgency=low
    
    
      * add build-dependency on libcap-dev [linux-any] to enable virtfs support
        which has been dropped in 1.1. (Closes: #677654)
      * intel_hda-do-not-call-msi_reset-when-only-device-state-needs-resetting.patch
        patch to fix Fixing reset of MSI function in intel-hda virtual device.
        The fix (applied to stable-1.1.1) was partially wrong, as it actually
        added the msi_reset() call to two code paths instead of one as planned.
        Fix this by splitting the function in question into two parts.
        (Closes: #688964)
      * blockdev-preserve-readonly-and-snapshot-states-across-media-changes.patch:
        allow opening of read-only cdrom images/devices (Closes: #686776)
      * ahci-properly-reset-PxCMD-on-HBA-reset.patch: fix windows install on ahci
        (Closes: #696052)
      * e1000-discard-packets-that-are-too-long-if-not-SBP-and-not-LPE.patch:
        discard too long rx packets which may overflow guest buffer
        (Closes: #696051)
      * eepro100-fix-network-hang-when-rx-buffers-run-out.patch:
        fix e100 stall (Closes: #696061)
      * fix possible network stalls/slowness in e1000 device emulation:
        net-notify-iothread-after-flushing-queue.patch
        e1000-flush-queue-whenever-can_receive-can-go-from-false-to-true.patch
        (Closes: #696063)
      * fixes-related-to-processing-of-qemu-s-numa-option.patch:
        fixes numa handling (Closes: #691343)
      * qcow2-fix-avail_sectors-in-cluster-allocation-code.patch:
        fixes data corruption in stacked qcow2 (Closes: #695905)
      * qcow2-fix-refcount-table-size-calculation.patch: another possible
        corruption or crash in qcow2 (Closes: #691569)
      * tap-reset-vnet-header-size-on-open.patch: always ensure tap device is
        in known state initially (Closes: #696057)
      * vmdk-fix-data-corruption-bug-in-WRITE-and-READ-handling.patch:
        possible data corruption bug in vmdk image format (Closes: #696050)
    
     -- Michael Tokarev <email address hidden>  Sun, 16 Dec 2012 23:08:40 +0400
  • qemu (1.1.2+dfsg-2) unstable; urgency=low
    
    
      * remove debian/patches/fix-armhf-prctl.patch, it is included
        upstream in 1.1.0 version and is misapplied since 1.1.0~rc3+dfsg-1.
      * drop -jN passing to downstream makes, as it breaks dpkg-buildpackage -j
        and actually breaks build (Closes: #597524 - said to be fixed in 0.14.1
        but was still present)
      * add revert-serial-fix-retry-logic.patch that restores
        old (semi-)working behavour of a virtual serial port.
    
     -- Michael Tokarev <email address hidden>  Wed, 19 Sep 2012 13:54:05 +0400
  • qemu (1.1.0+dfsg-1) unstable; urgency=low
    
    
      [ Vagrant Cascadian ]
      * New upstream release.
    
      [ Michael Tokarev ]
      * do-not-include-libutil.h.patch - don't include libutil.h&Co when not
        needed.  Fixes FTBFS on kFreebsd with recent libbsd-dev.
      * drop libbsd-dev support on kFreebsd - no longer needed.
      * do not build USB host support on kFreebsd (qemu uses obsolete,
        now removed, USB API).  Use the same hack/technique as FreeBSD
        qemu port does -- changing HOST_USB to "stub" after configure run.
    
     -- Vagrant Cascadian <email address hidden>  Thu, 07 Jun 2012 13:44:26 -0700
  • qemu (1.0.1+dfsg-1) unstable; urgency=low
    
    
      [ Aurelien Jarno ]
      * New upstream stable version:
        - remove debian/patches/fix-malta-i8259
        - remove debian/patches/qemu-ifunc-ppc.patch
        - remove debian/patches/x86-fix-cmpxchg.patch
    
      [ Michael Tokarev ]
      * apply patch to change backticks `` in debian/rules variables
        to $(shell) construct, by Allard Hoeve.  (Closes: #660133)
      * depend on vgabios >= 0.6c-3~ not 0.6c-3, to assist backporting
    
      [ Hector Oron ]
      * Fix prctl syscall (Closes: #656926, #651083). 
    
      [ Vagrant Cascadian ]
      * Update to Standards-Version 3.9.3, no changes necessary.
    
     -- Vagrant Cascadian <email address hidden>  Mon, 05 Mar 2012 13:05:14 -0800
  • qemu (1.0+dfsg-3) unstable; urgency=low
    
    
      [ Aurelien Jarno ]
      * Add a build-depends on libfdt-dev to enable some more emulated machines.
      * Really add binfmt support for s390x.
    
      [ Michael Tokarev ]
      * Depend on ipxe-qemu | ipxe (<< 1.0.0+git-20120202.f6840ba-2)
        after ipxe package split.  This will probably need to be changed
        to just ipxe-qemu once it will be landed properly.
    
      [ Vagrant Cascadian ]
      * Apply patch to use dpkg-buildflags (Closes: #656276). 
        Thanks to Moritz Muehlenhoff. 
    
     -- Vagrant Cascadian <email address hidden>  Mon, 06 Feb 2012 17:56:15 -0800
  • qemu (1.0+dfsg-2) unstable; urgency=low
    
    
      [ Aurelien Jarno ]
      * Add patch from upstream to fix cmpxchg on x86.
      * Add patch to not link user builds with NSS (Closes: #648202).
      * Add binfmt support for s390x.
      * Bump depends on openbios-ppc and openbios-sparc on versions 
        compatible with version 1.0.
      * Build on s390x (Closes: #651048).
    
      [ Vagrant Cascadian ]
      * qemu-make-debian-root: Fix argument processing to handle when both -s and 
        -k are specified. Thanks to Mats Erik Andersson (Closes: #638047).
      * Add Patch from upstream to fix regression on malta with i8259 interrupts.
      * qemu-debootstrap: Add support for armhf and s390x. 
      * debian/rules: remove config.log in the clean target. 
      * qemu-make-debian-root: Use debootstrap's minbase variant, instead of a 
        long list of excludes.
    
     -- Vagrant Cascadian <email address hidden>  Mon, 09 Jan 2012 16:01:17 -0800
  • qemu (0.15.1+dfsg-3) unstable; urgency=low
    
    
      * Add patch from upstream to fix FTBFS on ia64. 
    
     -- Vagrant Cascadian <email address hidden>  Fri, 09 Dec 2011 23:48:21 -0800
  • qemu (0.14.1+dfsg-3) unstable; urgency=low
      [ Aurelien Jarno ]  * Add patches/qemu-ifunc-ppc.patch and patches/qemu-ifunc-sparc.patch    to fix FTBFS on ppc and sparc.  [ Vagrant Cascadian ]  * Apply patch to fix qemu-user-static mipsel emulation (Closes: #562887).  * Drop support for esd (Closes: #633390). Thanks to Adrian Bunk.  * Add dummy debian/rules build-indep/build-arch targets to resolve lintian     warnings and future policy requirements.  * Remove needless mention of "Author(s)" which triggers a lintian warning.  * Fix maintainer-script-without-set-e lintian checks.  * Fix hyphen-used-as-minus-sign lintian check for qemu-debootstrap manpage. -- Vagrant Cascadian <email address hidden>  Sat, 23 Jul 2011 10:18:37 +0200
  • qemu (0.14.0+dfsg-5.1) unstable; urgency=low
      * Non-maintainer upload.  * Replace "librados1-dev" by "librados-dev" in Build-Dependencies. -- Mehdi Dogguy <email address hidden>  Fri, 29 Apr 2011 17:45:05 +0200
  • qemu (0.14.0+dfsg-5) unstable; urgency=low
      * Don't register qemu-mips(el) with binfmt on mips(el).  Closes:    #618369. -- Aurelien Jarno <email address hidden>  Thu, 17 Mar 2011 20:13:27 +0100
  • qemu (0.12.5+dfsg-3) unstable; urgency=medium
      * qemu-user-static:     - Drop binfmt support for emulating amd64 on i386, as it is broken and      including it interferes with environments capable of running amd64      natively.  Closes: #604712.    - Remove binfmt support for installed targets in postinst before installing      supported targets, to ensure no-longer-supported targets are actually      removed.    - Remove binfmt support for installed targets in prerm. -- Vagrant Cascadian <email address hidden>  Sun, 28 Nov 2010 15:57:11 -0800