Quoting Cole Robinson (2016-03-21 14:32:14) > On 03/21/2016 01:27 PM, Michael Roth wrote: > > Hi everyone, > > > > The following new patches are queued for QEMU stable v2.5.1: > > > > https://github.com/mdroth/qemu/commits/stable-2.5-staging > > > > The release is planned for 2016-03-29: > > > > http://wiki.qemu.org/Planning/2.5 > > > > Please respond here or CC [email protected] on any patches you > > think should be included in the release. > > > > Testing/feedback is greatly appreciated. > > > > Here's some patches we have in Fedora that aren't in your tree that IMO are > stable candidates: > > 99b4cb7 ahci: Do not unmap NULL addresses > 64ffbe0 hmp: fix sendkey out of bounds write (CVE-2015-8619) > 4c1396c i386: avoid null pointer dereference > 4ab0359 ide: ahci: reset ncq object to unused on error > 362786f net: check packet payload length > aa7f996 net: ne2000: fix bounds check in ioport operations > 49d925c usb: check page select value while processing iTD > fe3c546 usb: check RNDIS buffer offsets & length > 64c9bc1 usb: check RNDIS message length > 80eecda usb: check USB configuration descriptor object > d62d9dc vmdk: Create streamOptimized as version 3 > 3db1d98 vmdk: Fix converting to streamOptimized > > vmdk patches are for https://bugzilla.redhat.com/show_bug.cgi?id=1299185 > Rest are security issues
Thanks, definitely good to have. Have them all applied locally and will push after another round of testing. > > Thanks, > Cole >
