Site Navigation:
security qemu-1.6.0-10.fc20 security update
Status:stable
Release: Fedora 20
Update ID: FEDORA-2013-18715
Builds: qemu-1.6.0-10.fc20 (logs)
Pushed: True
Date Submitted: 2013-10-09 19:33:39
Date Released: 2013-10-10 14:18:46
Submitter: crobinso
Karma: 3
Stable karma: 3
Unstable karma: -3
Details
  • Fix migration from qemu <= 1.5
  • Rebase to pending 1.6.1 stable
  • CVE-2013-4377: Fix crash when unplugging virtio devices (bz #1012633, bz #1012641)
  • Fix 'new snapshot' slowness after the first snap (bz #988436)
  • Fix 9pfs xattrs on kernel 3.11 (bz #1013676)
  • CVE-2013-4344: buffer overflow in scsi_target_emulate_report_luns (bz #1015274, bz #1007330)
Bugs Fixed
988436 - qemu: internal snapshots are slow after the first one
1012633 - CVE-2013-4377: qemu: hot-unplugging virtio devices in guest can crash host qemu process
1012641 - CVE-2013-4377: qemu: hot-unplugging virtio devices in guest can crash host qemu process [fedora-all]
1015274 - CVE-2013-4344: qemu: buffer overflow in scsi_target_emulate_report_luns [fedora-all]
1007330 - CVE-2013-4344: qemu: buffer overflow in scsi_target_emulate_report_luns
Feedback
bodhi - 2013-10-09 19:34:22
This update has been submitted for testing by crobinso.
autoqa - 2013-10-09 19:48:03
AutoQA: depcheck test PASSED on i386. Result log: http://autoqa.fedoraproject.org/report/13noy (results are informative only)
autoqa - 2013-10-09 19:48:06
AutoQA: depcheck test PASSED on x86_64. Result log: http://autoqa.fedoraproject.org/report/13np0 (results are informative only)
bodhi - 2013-10-10 03:01:29
This update is currently being pushed to the Fedora 20 testing updates repository.
bodhi - 2013-10-10 13:31:39
This update is currently being pushed to the Fedora 20 testing updates repository.
bodhi - 2013-10-10 14:40:19
This update has been pushed to testing
ignatenkobrain - 2013-10-12 08:34:19
works fine. CVEs not tested
kuosmanen - 2013-10-13 22:09:12
fine
adamwill (proventesters) - 2013-10-14 10:19:27
regular VM use is fine
bodhi - 2013-10-14 10:19:31
This update has reached the stable karma threshold and will be pushed to the stable updates repository
autoqa - 2013-10-14 10:46:32
AutoQA: upgradepath test PASSED on noarch. Result log: http://autoqa.fedoraproject.org/report/13sxh (results are informative only)
bodhi - 2013-10-15 04:56:40
This update is currently being pushed to the Fedora 20 stable updates repository.
bodhi - 2013-10-15 05:19:15
This update is currently being pushed to the Fedora 20 stable updates repository.
bodhi - 2013-10-15 05:21:27
This update is currently being pushed to the Fedora 20 stable updates repository.
bodhi - 2013-10-15 06:37:33
This update has been pushed to stable

Add a comment

Tip: Login to impact how quickly this update gets pushed or unpushed.
obfuscated letters