UbuntuUpdates.org

Package "qemu-system-arm"

Name: qemu-system-arm

Description:

QEMU full system emulation binaries (arm)

Latest version: 1:2.11+dfsg-1ubuntu7.28
Release: bionic (18.04)
Level: updates
Repository: main
Head package: qemu
Homepage: http://www.qemu.org/

Links


Download "qemu-system-arm"


Other versions of "qemu-system-arm" in Bionic

Repository Area Version
base main 1:2.11+dfsg-1ubuntu7
security main 1:2.11+dfsg-1ubuntu7.26

Changelog

Version: 1:2.11+dfsg-1ubuntu7.28 2020-06-30 12:07:01 UTC

  qemu (1:2.11+dfsg-1ubuntu7.28) bionic; urgency=medium

  * Revert the fixes in 1:2.11+dfsg-1ubuntu7.27 for LP: 1805256 as they
    were causing regressions for some iothread use cases (LP: #1885419)

 -- Christian Ehrhardt <email address hidden> Tue, 30 Jun 2020 08:57:18 +0200

Source diff to previous version
1885419 QEMU crash using virtio-scsi with iothread

Version: 1:2.11+dfsg-1ubuntu7.27 2020-06-18 11:06:34 UTC

  qemu (1:2.11+dfsg-1ubuntu7.27) bionic; urgency=medium

  * d/p/ubuntu/lp-1805256*: Fixes for QEMU on aarch64 ARM hosts
    - aio: rename aio_context_in_iothread() to in_aio_context_home_thread()
    - aio: Do aio_notify_accept only during blocking aio_poll
    - aio-posix: Assert that aio_poll() is always called in home thread
    - async: use explicit memory barriers (LP: #1805256)
    - aio-wait: delegate polling of main AioContext if BQL not held
    - aio-posix: Don't count ctx->notifier as progress when polling

 -- Rafael David Tinoco <email address hidden> Tue, 26 May 2020 17:39:21 +0000

Source diff to previous version

Version: 1:2.11+dfsg-1ubuntu7.26 2020-05-21 18:06:38 UTC

  qemu (1:2.11+dfsg-1ubuntu7.26) bionic-security; urgency=medium

  * SECURITY UPDATE: memory leak in zrle_compress_data
    - debian/patches/ubuntu/CVE-2019-20382.patch: fix memory leak when vnc
      disconnect in ui/vnc-enc-tight.c, ui/vnc-enc-zrle.inc.c, ui/vnc.c,
      ui/vnc.h.
    - CVE-2019-20382
  * SECURITY UPDATE: use-after-free in ip_reass()
    - debian/patches/ubuntu/CVE-2020-1983.patch: fix buffer handling in
      slirp/ip_input.c.
    - CVE-2020-1983

 -- Marc Deslauriers <email address hidden> Thu, 14 May 2020 13:36:56 -0400

Source diff to previous version
CVE-2019-20382 QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a sit
CVE-2020-1983 A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Version: 1:2.11+dfsg-1ubuntu7.25 2020-05-21 09:06:29 UTC

  qemu (1:2.11+dfsg-1ubuntu7.25) bionic; urgency=medium

  * d/rules: match how 2.11 stores PKGVERSION (LP: 1847361)

Source diff to previous version

Version: 1:2.11+dfsg-1ubuntu7.23 2020-02-18 19:06:33 UTC

  qemu (1:2.11+dfsg-1ubuntu7.23) bionic-security; urgency=medium

  * SECURITY UPDATE: OOB heap access via unexpected iSCSI Server response
    - debian/patches/CVE-2020-1711.patch: cap block count from GET LBA
      STATUS in block/iscsi.c.
    - CVE-2020-1711
  * SECURITY UPDATE: heap-based overflow in slirp networking
    - debian/patches/CVE-2020-7039-1.patch: fix oob issue in
      slirp/tcp_subr.c.
    - debian/patches/CVE-2020-7039-2.patch: use correct size while
      emulating IRC commands in slirp/tcp_subr.c.
    - debian/patches/CVE-2020-7039-3.patch: use correct size while
      emulating commands in slirp/tcp_subr.c.
    - CVE-2020-7039
  * SECURITY UPDATE: buffer overflow via incorrect snprintf return codes
    - debian/patches/CVE-2020-8608-1.patch: add slirp_fmt() helpers to
      slirp/slirp.c, slirp/slirp.h.
    - debian/patches/CVE-2020-8608-2.patch: fix unsafe snprintf() usages in
      slirp/tcp_subr.c.
    - CVE-2020-8608

 -- Marc Deslauriers <email address hidden> Wed, 12 Feb 2020 13:56:45 -0500

CVE-2020-1711 An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming f
CVE-2020-7039 tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a h
CVE-2020-8608 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.



About   -   Send Feedback to @ubuntu_updates