Package "qemu"

Name: qemu


fast processor emulator, dummy package

Latest version: 1:4.0+dfsg-0ubuntu9.6
Release: eoan (19.10)
Level: updates
Repository: universe
Homepage: http://www.qemu.org/


Save this URL for the latest version of "qemu": https://www.ubuntuupdates.org/qemu

Download "qemu"

Other versions of "qemu" in Eoan

Repository Area Version
base universe 1:4.0+dfsg-0ubuntu9
base main 1:4.0+dfsg-0ubuntu9
security universe 1:4.0+dfsg-0ubuntu9.6
security main 1:4.0+dfsg-0ubuntu9.6
updates main 1:4.0+dfsg-0ubuntu9.6

Packages in group

Deleted packages are displayed in grey.


Version: 1:4.0+dfsg-0ubuntu9.6 2020-05-21 18:06:45 UTC

  qemu (1:4.0+dfsg-0ubuntu9.6) eoan-security; urgency=medium

  * SECURITY UPDATE: overflow via PCIe extended config space
    - debian/patches/ubuntu/CVE-2019-15034.patch: fix pcie support in
    - CVE-2019-15034
  * SECURITY UPDATE: memory leak in zrle_compress_data
    - debian/patches/ubuntu/CVE-2019-20382.patch: fix memory leak when vnc
      disconnect in ui/vnc-enc-tight.c, ui/vnc-enc-zrle.inc.c, ui/vnc.c,
    - CVE-2019-20382
  * SECURITY UPDATE: weak sig generation in Pointer Auth support for ARM
    - debian/patches/ubuntu/CVE-2020-10702.patch: fix PAuth sbox functions
      in target/arm/pauth_helper.c.
    - CVE-2020-10702
  * SECURITY UPDATE: use-after-free in ip_reass()
    - debian/patches/ubuntu/CVE-2020-1983.patch: fix buffer handling in
    - CVE-2020-1983

 -- Marc Deslauriers <email address hidden> Thu, 14 May 2020 08:31:48 -0400

Source diff to previous version
CVE-2020-1983 A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
CVE-2020-10702 weak signature generation in Pointer Authentication support for ARM
CVE-2019-20382 QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a sit
CVE-2019-15034 hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe ex

Version: 1:4.0+dfsg-0ubuntu9.5 2020-05-14 09:08:04 UTC

  qemu (1:4.0+dfsg-0ubuntu9.5) eoan; urgency=medium

  * allow qemu to load old modules post upgrade (LP: #1847361)
    - d/p/ubuntu/lp-1847361-modules-load-upgrade.patch: to fallback module
      load to a versioned path
    - d/qemu-block-extra.*.in, d/qemu-system-gui.*.in: save shared objects on
    - d/rules: generate maintainer scripts matching package version on build
    - d/rules: enable --enable-module-upgrades where --enable-modules is set

 -- Christian Ehrhardt <email address hidden> Mon, 02 Mar 2020 15:21:27 +0100

Source diff to previous version
1847361 Upgrade of qemu binaries causes running instances not able to dynamically load modules

Version: 1:4.0+dfsg-0ubuntu9.4 2020-02-18 19:06:38 UTC

  qemu (1:4.0+dfsg-0ubuntu9.4) eoan-security; urgency=medium

  * SECURITY UPDATE: OOB heap access via unexpected iSCSI Server response
    - debian/patches/ubuntu/CVE-2020-1711.patch: cap block count from GET
      LBA STATUS in block/iscsi.c.
    - CVE-2020-1711
  * SECURITY UPDATE: heap-based overflow in slirp networking
    - debian/patches/ubuntu/CVE-2020-7039-1.patch: fix oob issue in
    - debian/patches/ubuntu/CVE-2020-7039-2.patch: use correct size while
      emulating IRC commands in slirp/src/tcp_subr.c.
    - debian/patches/ubuntu/CVE-2020-7039-3.patch: use correct size while
      emulating commands in slirp/src/tcp_subr.c.
    - CVE-2020-7039
  * SECURITY UPDATE: buffer overflow via incorrect snprintf return codes
    - debian/patches/ubuntu/CVE-2020-8608-1.patch: add slirp_fmt() helpers
      to slirp/src/util.c, slirp/src/util.h.
    - debian/patches/ubuntu/CVE-2020-8608-2.patch: fix unsafe snprintf()
      usages in slirp/src/tcp_subr.c.
    - CVE-2020-8608

 -- Marc Deslauriers <email address hidden> Tue, 11 Feb 2020 14:24:01 -0500

Source diff to previous version
CVE-2020-1711 An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming f
CVE-2020-7039 tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a h
CVE-2020-8608 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

Version: 1:4.0+dfsg-0ubuntu9.3 2020-02-12 01:07:06 UTC

  qemu (1:4.0+dfsg-0ubuntu9.3) eoan; urgency=medium

  * d/p/lp1859527-virtio-blk-fix-out-of-bounds-access-to-bitmap-in-not.patch:
    fix bitmap index to prevent OOB access when # of vqs > 64 (LP: #1859527)

 -- Dan Streetman <email address hidden> Wed, 22 Jan 2020 08:50:56 -0500

Source diff to previous version
1859527 vring_get_region_caches: Assertion `caches != NULL' failed.

Version: 1:4.0+dfsg-0ubuntu9.2 2019-12-02 13:06:59 UTC

  qemu (1:4.0+dfsg-0ubuntu9.2) eoan; urgency=medium

  * d/p/ubuntu/lp-1848556-curl-Handle-success-in-multi_check_completion.patch:
    fix a potential hang when qemu or qemu-img where accessing http backed
    disks via libcurl (LP: #1848556)
  * d/p/u/lp-1848497-virtio-balloon-fix-QEMU-4.0-config-size-migration-in.patch:
    fix migration issue from qemu <4.0 when using virtio-balloon (LP: #1848497)

 -- Christian Ehrhardt <email address hidden> Mon, 21 Oct 2019 14:51:45 +0200

1848556 qemu-img check failing on remote image in Eoan
1848497 virtio-balloon change breaks migration from qemu prior to 4.0

About   -   Send Feedback to @ubuntu_updates