guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}]


From: Leo Famulari
Subject: qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}]
Date: Tue, 10 May 2016 03:43:13 -0400
User-agent: Mutt/1.6.0 (2016-04-01)

On Tue, May 10, 2016 at 07:35:44AM +0000, Leo Famulari wrote:
> lfam pushed a commit to branch master
> in repository guix.
> 
> commit b6449e61262374581b342aa4920bd37f2292923e
> Author: Leo Famulari <address@hidden>
> Date:   Mon May 9 20:48:36 2016 -0400
> 
>     gnu: qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}].
>     
>     * gnu/packages/qemu.scm (qemu): Update to 2.5.1.1.
>     [arguments]: Disable parallel tests.

QEMU has released 2.5.1.1 [0], which fixes these bugs:

* CVE-2015-8558
* CVE-2016-3710
* CVE-2016-3712
* an out of bounds write in 'cadence_uart' [1] 

I wasn't able to build it reliably on my x86_64 machine. Sometimes, it
would fail the test suite, and sometimes it would pass. It passed the
tests more reliably (--rounds=10) when parallel-tests are #f, so I made
that change.

[0]
https://lists.nongnu.org/archive/html/qemu-stable/2016-05/msg00008.html

[1]
http://git.qemu.org/?p=qemu.git;a=commit;h=5b7236f7256974d9c0286fa4837aa5e15ef5c629



reply via email to

[Prev in Thread] Current Thread [Next in Thread]