-
qemu (1.1.2+dfsg-6a+deb7u12) wheezy-security; urgency=high
* applied 3 patches from upstream to fix virtio-net
possible remote DoS (Closes: #799452 CVE-2015-7295)
* pcnet-add-check-to-validate-receive-data-size-CVE-2015-7504.patch
(Closes: #806742, CVE-2015-7504)
* pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch
(Closes: #806741, CVE-2015-7512)
* eepro100-prevent-two-endless-loops-CVE-2015-8345.patch
(Closes: #806373, CVE-2015-8345)
* vnc-avoid-floating-point-exception-CVE-2015-8504.patch
(Closes: #808130, CVE-2015-8504)
* ehci-make-idt-processing-more-robust-CVE-2015-8558.patch
(Closes: #808144, CVE-2015-8558)
* net-ne2000-fix-bounds-check-in-ioport-operations-CVE-2015-8743.patch
(Closes: #810519, CVE-2015-8743)
* ide-ahci-reset-ncq-object-to-unused-on-error-CVE-2016-1568.patch
(Closes: #810527, CVE-2016-1568)
* fw_cfg-add-check-to-validate-current-entry-value-CVE-2016-1714.patch
(Closes: CVE-2016-1714)
* i386-avoid-null-pointer-dereference-CVE-2016-1922.patch
(Closes: #811201, CVE-2016-1922)
-- Michael Tokarev <email address hidden> Mon, 01 Feb 2016 23:53:18 +0300
-
qemu (1.1.2+dfsg-6a+deb7u8) wheezy-security; urgency=high
* slirp-use-less-predictable-directory-name-in-tmp-CVE-2015-4037.patch
(Closes: CVE-2015-4037)
* pcnet-force-buffer-access-to-be-in-bounds-CVE-2015-3209.patch
with preparation bugfix pcnet-fix-negative-array-index-read.patch
from upstream (Closes: #788460 CVE-2015-3209)
-- Michael Tokarev <email address hidden> Fri, 12 Jun 2015 09:51:17 +0300
-
qemu (1.1.2+dfsg-6a+deb7u6) wheezy-security; urgency=high
* apply upstream patches for CVE-2014-8106 (buffer overflow
in cirrus vga emulation) (Closes: CVE-2014-8106)
-- Michael Tokarev <email address hidden> Wed, 03 Dec 2014 23:46:51 +0300
-
qemu (1.1.2+dfsg-6a+deb7u4) wheezy-security; urgency=medium
* image-format-validation patch series backported from 2.0, closing
CVE-2014-0142, CVE-2014-0143, CVE-2014-0144, CVE-2014-0145,
CVE-2014-0146, CVE-2014-0147, CVE-2014-0222, CVE-2014-0223
(Closes: #742730)
* slirp-udp-fix-NULL-pointer-deref-uninit-socket-CVE-2014-3640.patch
closing CVE-2014-3640 (Closes: #762532)
* spice-make-sure-we-don-t-overflow-ssd-buf-CVE-2014-3615.patch and
vbe-rework-sanity-checks-CVE-2014-3615.patch closing CVE-2014-3615
-- Michael Tokarev <email address hidden> Tue, 20 May 2014 09:49:42 +0400
-
qemu (1.1.2+dfsg-6a+deb7u3) wheezy-security; urgency=high
* ide-correct-improper-smart-self-test-counter-reset-CVE-2014-2894.patch
(Closes: #745157 CVE-2014-2894)
* scsi-allocate-SCSITargetReq-r-buf-dynamically-CVE-2013-4344.patch
(Closes: #725944 CVE-2013-4344)
-- Michael Tokarev <email address hidden> Wed, 14 May 2014 16:08:52 +0400
-
qemu (1.1.2+dfsg-6a+deb7u2) stable; urgency=medium
[ Gabriele Giacone ]
* Fix crash booting GNU/Hurd on both hwaccel systems without --enable-kvm
option and on non-hwaccel ones (Closes: #719633).
* Fix crash booting GNU/Hurd with QEMU multiboot options (Closes: #741873).
-- Michael Tokarev <email address hidden> Sat, 19 Apr 2014 09:21:00 +0400
-
qemu (1.1.2+dfsg-6a) unstable; urgency=low
* reupload to remove two unrelated files slipped in debian/
-- Michael Tokarev <email address hidden> Mon, 18 Mar 2013 10:09:37 +0400
-
qemu (1.1.2+dfsg-5) unstable; urgency=low
* fix USB regression introduced in 1.1 (Closes: #683983)
uhci-don-t-queue-up-packets-after-one-with-the-SPD-flag-set.patch
Big thanks to Peter Schaefer (https://bugs.launchpad.net/bugs/1033727)
for the help identifying the fix.
-- Michael Tokarev <email address hidden> Mon, 14 Jan 2013 12:20:29 +0400
-
qemu (1.1.2+dfsg-3) unstable; urgency=low
* add build-dependency on libcap-dev [linux-any] to enable virtfs support
which has been dropped in 1.1. (Closes: #677654)
* intel_hda-do-not-call-msi_reset-when-only-device-state-needs-resetting.patch
patch to fix Fixing reset of MSI function in intel-hda virtual device.
The fix (applied to stable-1.1.1) was partially wrong, as it actually
added the msi_reset() call to two code paths instead of one as planned.
Fix this by splitting the function in question into two parts.
(Closes: #688964)
* blockdev-preserve-readonly-and-snapshot-states-across-media-changes.patch:
allow opening of read-only cdrom images/devices (Closes: #686776)
* ahci-properly-reset-PxCMD-on-HBA-reset.patch: fix windows install on ahci
(Closes: #696052)
* e1000-discard-packets-that-are-too-long-if-not-SBP-and-not-LPE.patch:
discard too long rx packets which may overflow guest buffer
(Closes: #696051)
* eepro100-fix-network-hang-when-rx-buffers-run-out.patch:
fix e100 stall (Closes: #696061)
* fix possible network stalls/slowness in e1000 device emulation:
net-notify-iothread-after-flushing-queue.patch
e1000-flush-queue-whenever-can_receive-can-go-from-false-to-true.patch
(Closes: #696063)
* fixes-related-to-processing-of-qemu-s-numa-option.patch:
fixes numa handling (Closes: #691343)
* qcow2-fix-avail_sectors-in-cluster-allocation-code.patch:
fixes data corruption in stacked qcow2 (Closes: #695905)
* qcow2-fix-refcount-table-size-calculation.patch: another possible
corruption or crash in qcow2 (Closes: #691569)
* tap-reset-vnet-header-size-on-open.patch: always ensure tap device is
in known state initially (Closes: #696057)
* vmdk-fix-data-corruption-bug-in-WRITE-and-READ-handling.patch:
possible data corruption bug in vmdk image format (Closes: #696050)
-- Michael Tokarev <email address hidden> Sun, 16 Dec 2012 23:08:40 +0400
-
qemu (1.1.2+dfsg-2) unstable; urgency=low
* remove debian/patches/fix-armhf-prctl.patch, it is included
upstream in 1.1.0 version and is misapplied since 1.1.0~rc3+dfsg-1.
* drop -jN passing to downstream makes, as it breaks dpkg-buildpackage -j
and actually breaks build (Closes: #597524 - said to be fixed in 0.14.1
but was still present)
* add revert-serial-fix-retry-logic.patch that restores
old (semi-)working behavour of a virtual serial port.
-- Michael Tokarev <email address hidden> Wed, 19 Sep 2012 13:54:05 +0400
-
qemu (1.1.0+dfsg-1) unstable; urgency=low
[ Vagrant Cascadian ]
* New upstream release.
[ Michael Tokarev ]
* do-not-include-libutil.h.patch - don't include libutil.h&Co when not
needed. Fixes FTBFS on kFreebsd with recent libbsd-dev.
* drop libbsd-dev support on kFreebsd - no longer needed.
* do not build USB host support on kFreebsd (qemu uses obsolete,
now removed, USB API). Use the same hack/technique as FreeBSD
qemu port does -- changing HOST_USB to "stub" after configure run.
-- Vagrant Cascadian <email address hidden> Thu, 07 Jun 2012 13:44:26 -0700
-
qemu (1.0.1+dfsg-1) unstable; urgency=low
[ Aurelien Jarno ]
* New upstream stable version:
- remove debian/patches/fix-malta-i8259
- remove debian/patches/qemu-ifunc-ppc.patch
- remove debian/patches/x86-fix-cmpxchg.patch
[ Michael Tokarev ]
* apply patch to change backticks `` in debian/rules variables
to $(shell) construct, by Allard Hoeve. (Closes: #660133)
* depend on vgabios >= 0.6c-3~ not 0.6c-3, to assist backporting
[ Hector Oron ]
* Fix prctl syscall (Closes: #656926, #651083).
[ Vagrant Cascadian ]
* Update to Standards-Version 3.9.3, no changes necessary.
-- Vagrant Cascadian <email address hidden> Mon, 05 Mar 2012 13:05:14 -0800
-
qemu (1.0+dfsg-3) unstable; urgency=low
[ Aurelien Jarno ]
* Add a build-depends on libfdt-dev to enable some more emulated machines.
* Really add binfmt support for s390x.
[ Michael Tokarev ]
* Depend on ipxe-qemu | ipxe (<< 1.0.0+git-20120202.f6840ba-2)
after ipxe package split. This will probably need to be changed
to just ipxe-qemu once it will be landed properly.
[ Vagrant Cascadian ]
* Apply patch to use dpkg-buildflags (Closes: #656276).
Thanks to Moritz Muehlenhoff.
-- Vagrant Cascadian <email address hidden> Mon, 06 Feb 2012 17:56:15 -0800
-
qemu (1.0+dfsg-2) unstable; urgency=low
[ Aurelien Jarno ]
* Add patch from upstream to fix cmpxchg on x86.
* Add patch to not link user builds with NSS (Closes: #648202).
* Add binfmt support for s390x.
* Bump depends on openbios-ppc and openbios-sparc on versions
compatible with version 1.0.
* Build on s390x (Closes: #651048).
[ Vagrant Cascadian ]
* qemu-make-debian-root: Fix argument processing to handle when both -s and
-k are specified. Thanks to Mats Erik Andersson (Closes: #638047).
* Add Patch from upstream to fix regression on malta with i8259 interrupts.
* qemu-debootstrap: Add support for armhf and s390x.
* debian/rules: remove config.log in the clean target.
* qemu-make-debian-root: Use debootstrap's minbase variant, instead of a
long list of excludes.
-- Vagrant Cascadian <email address hidden> Mon, 09 Jan 2012 16:01:17 -0800
-
qemu (0.15.1+dfsg-3) unstable; urgency=low
* Add patch from upstream to fix FTBFS on ia64.
-- Vagrant Cascadian <email address hidden> Fri, 09 Dec 2011 23:48:21 -0800
-
qemu (0.14.1+dfsg-3) unstable; urgency=low
[ Aurelien Jarno ] * Add patches/qemu-ifunc-ppc.patch and patches/qemu-ifunc-sparc.patch to fix FTBFS on ppc and sparc. [ Vagrant Cascadian ] * Apply patch to fix qemu-user-static mipsel emulation (Closes: #562887). * Drop support for esd (Closes: #633390). Thanks to Adrian Bunk. * Add dummy debian/rules build-indep/build-arch targets to resolve lintian warnings and future policy requirements. * Remove needless mention of "Author(s)" which triggers a lintian warning. * Fix maintainer-script-without-set-e lintian checks. * Fix hyphen-used-as-minus-sign lintian check for qemu-debootstrap manpage. -- Vagrant Cascadian <email address hidden> Sat, 23 Jul 2011 10:18:37 +0200
-
qemu (0.14.0+dfsg-5.1) unstable; urgency=low
* Non-maintainer upload. * Replace "librados1-dev" by "librados-dev" in Build-Dependencies. -- Mehdi Dogguy <email address hidden> Fri, 29 Apr 2011 17:45:05 +0200
-
qemu (0.14.0+dfsg-5) unstable; urgency=low
* Don't register qemu-mips(el) with binfmt on mips(el). Closes: #618369. -- Aurelien Jarno <email address hidden> Thu, 17 Mar 2011 20:13:27 +0100
-
qemu (0.12.5+dfsg-3) unstable; urgency=medium
* qemu-user-static: - Drop binfmt support for emulating amd64 on i386, as it is broken and including it interferes with environments capable of running amd64 natively. Closes: #604712. - Remove binfmt support for installed targets in postinst before installing supported targets, to ensure no-longer-supported targets are actually removed. - Remove binfmt support for installed targets in prerm. -- Vagrant Cascadian <email address hidden> Sun, 28 Nov 2010 15:57:11 -0800