Your message dated Wed, 03 Jun 2015 16:23:25 +0000
with message-id <e1z0brt-0002a5...@franck.debian.org>
and subject line Bug#787547: fixed in qemu 1:2.3+dfsg-5
has caused the Debian Bug report #787547,
regarding CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
787547: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787547
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: qemu
Severity: grave
Tags: security
Hi Michael,
please see theses Xen issues which all affect src:qemu
http://xenbits.xen.org/xsa/advisory-128.html
http://xenbits.xen.org/xsa/advisory-129.html
http://xenbits.xen.org/xsa/advisory-130.html
http://xenbits.xen.org/xsa/advisory-131.html
I suppose the Xen developers reported these to upstream, but
they were only disclosed some hours ago.
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: qemu
Source-Version: 1:2.3+dfsg-5
We believe that the bug you reported is fixed in the latest version of
qemu, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 787...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <m...@tls.msk.ru> (supplier of updated qemu package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 03 Jun 2015 17:18:58 +0300
Source: qemu
Binary: qemu qemu-system qemu-block-extra qemu-system-common qemu-system-misc
qemu-system-arm qemu-system-mips qemu-system-ppc qemu-system-sparc
qemu-system-x86 qemu-user qemu-user-static qemu-user-binfmt qemu-utils
qemu-guest-agent qemu-kvm libcacard0 libcacard-dev libcacard-tools
Architecture: source
Version: 1:2.3+dfsg-5
Distribution: unstable
Urgency: high
Maintainer: Debian QEMU Team <pkg-qemu-de...@lists.alioth.debian.org>
Changed-By: Michael Tokarev <m...@tls.msk.ru>
Description:
libcacard-dev - Virtual Common Access Card (CAC) Emulator (development files)
libcacard-tools - Virtual Common Access Card (CAC) Emulator (tools)
libcacard0 - Virtual Common Access Card (CAC) Emulator (runtime library)
qemu - fast processor emulator
qemu-block-extra - extra block backend modules for qemu-system and qemu-utils
qemu-guest-agent - Guest-side qemu-system agent
qemu-kvm - QEMU Full virtualization on x86 hardware
qemu-system - QEMU full system emulation binaries
qemu-system-arm - QEMU full system emulation binaries (arm)
qemu-system-common - QEMU full system emulation binaries (common files)
qemu-system-mips - QEMU full system emulation binaries (mips)
qemu-system-misc - QEMU full system emulation binaries (miscelaneous)
qemu-system-ppc - QEMU full system emulation binaries (ppc)
qemu-system-sparc - QEMU full system emulation binaries (sparc)
qemu-system-x86 - QEMU full system emulation binaries (x86)
qemu-user - QEMU user mode emulation binaries
qemu-user-binfmt - QEMU user mode binfmt registration for qemu-user
qemu-user-static - QEMU user mode emulation binaries (static version)
qemu-utils - QEMU utilities
Closes: 772422 787547
Changes:
qemu (1:2.3+dfsg-5) unstable; urgency=high
.
* slirp-use-less-predictable-directory-name-in-tmp-CVE-2015-4037.patch
(Closes: CVE-2015-4037)
* 11 patches for XEN PCI pass-through issues
(Closes: #787547 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106)
* kbd-add-brazil-kbd-keys-*.patch, adding two keys found on Brazilian
keyboards (Closes: #772422)
Checksums-Sha1:
43faa255f2a14f55d487a8aa0eb961011af47b9d 6040 qemu_2.3+dfsg-5.dsc
550cfa1784ea6af7d2e7d415c884a041918aa5e3 81820 qemu_2.3+dfsg-5.debian.tar.xz
Checksums-Sha256:
858468f6e692f75bea6c72ae89bae7ff208a006100dd71e9ed7e399e84f41d19 6040
qemu_2.3+dfsg-5.dsc
a9c355ba0c723aa3ac0f945df16ca77ab3fd7b25fad076c0c1082eb210cdd5f5 81820
qemu_2.3+dfsg-5.debian.tar.xz
Files:
92da4413ed53697c89fd7d9562212fa3 6040 otherosfs optional qemu_2.3+dfsg-5.dsc
40c80a3758a66257673220e5ede646ea 81820 otherosfs optional
qemu_2.3+dfsg-5.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJVbxobAAoJEL7lnXSkw9fbnlkIAK1QuOHi6AAs3VYsfUKCb0K3
/bmVJP686FWLPIzbRhfhE9kTrMXsdgqhYcjZu4wF3x36ABGWvTIkHmvvnNboKMUJ
oqJ34tsJWWf11PwJWr01x9xc2NB2I69uZXDxxCwqR0bQxZr0qllGdSrzsNxll78k
YubCCwThKVz3U1ZvK/N8Qz3s/pbhvYBNQ0iZN9Ku+K+Wb9vzp5qF0mU1CKv1/lWG
3kN7h8hXip/gzDFXpuQzIqK7UgCZIHVBrZEfZc9aUh+SKCYJbh/DYoWKLm8ggzau
BcIUJ8z4yWatmtjiZITRQHqM0OlRGHJanlytgvNULOWnTa6JW23UZj+vPVGkGNU=
=cpEE
-----END PGP SIGNATURE-----
--- End Message ---