Univention Bugzilla – Bug 54639
qemu: Multiple issues (4.4)
Last modified: 2022-04-06 17:06:31 CEST
New Debian qemu 1:2.8+dfsg-6+deb9u17A~4.4.8.202204051146 fixes: This update addresses the following issues: * slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593) * virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748) * off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c (CVE-2021-3930) * block: fdc: null pointer dereference may lead to guest crash (CVE-2021-20196) * vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354)
--- mirror/ftp/4.4/unmaintained/component/4.4-8-errata/source/qemu_2.8+dfsg-6+deb9u16A~4.4.8.202109130906.dsc +++ apt/ucs_4.4-0-errata4.4-8/source/qemu_2.8+dfsg-6+deb9u17A~4.4.8.202204051855.dsc @@ -1,4 +1,4 @@ -1:2.8+dfsg-6+deb9u16A~4.4.8.202109130906 [Mon, 13 Sep 2021 09:14:33 +0200] Univention builddaemon <buildd@univention.de>: +1:2.8+dfsg-6+deb9u17A~4.4.8.202204051855 [Tue, 05 Apr 2022 19:02:42 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. The following patches have been applied to the original source package 0001-Disable-Xen-for-UCS @@ -13,6 +13,15 @@ 1007-0008-x86-Work-around-SMI-migration-breakages 1008-0009-migration-ram.c-do-not-set-postcopy_running-in-POSTC +1:2.8+dfsg-6+deb9u17 [Mon, 04 Apr 2022 13:40:24 +0200] Emilio Pozuelo Monfort <pochu@debian.org>: + + * Non-maintainer upload by the LTS team. + * CVE-2021-3593: out-of-bounds read or memory disclosure in udp6_input. + * CVE-2021-3748: use-after-free in the virtio-net device. + * CVE-2021-3930: off-by-one in the SCSI device leading to denial of service. + * CVE-2021-20196: null pointer dereference in the floppy disk emulation. + * CVE-2022-26354: invalid elements left in the virtqueue in vhost-vsock. + 1:2.8+dfsg-6+deb9u16 [Sat, 11 Sep 2021 18:47:27 +0200] Markus Koschany <apo@debian.org>: * Non-maintainer upload by the LTS team. <http://piuparts.knut.univention.de/4.4-8/#7599359893374383243>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-8] 549c8b06f9 Bug #54639: yaml doc/errata/staging/qemu.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) [4.4-8] f5e0f5bbae Bug #54639: qemu 1:2.8+dfsg-6+deb9u17A~4.4.8.202204051855 doc/errata/staging/qemu.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) [4.4-8] b1432e5397 Bug #54639: qemu 1:2.8+dfsg-6+deb9u17A~4.4.8.202204051146 doc/errata/staging/qemu.yaml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x1215>