all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Leo Famulari <leo@famulari.name>
To: guix-devel@gnu.org
Subject: qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}]
Date: Tue, 10 May 2016 03:43:13 -0400	[thread overview]
Message-ID: <20160510074313.GA912@jasmine> (raw)
In-Reply-To: <20160510073544.B8BAA220062@vcs.savannah.gnu.org>

On Tue, May 10, 2016 at 07:35:44AM +0000, Leo Famulari wrote:
> lfam pushed a commit to branch master
> in repository guix.
> 
> commit b6449e61262374581b342aa4920bd37f2292923e
> Author: Leo Famulari <leo@famulari.name>
> Date:   Mon May 9 20:48:36 2016 -0400
> 
>     gnu: qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}].
>     
>     * gnu/packages/qemu.scm (qemu): Update to 2.5.1.1.
>     [arguments]: Disable parallel tests.

QEMU has released 2.5.1.1 [0], which fixes these bugs:

* CVE-2015-8558
* CVE-2016-3710
* CVE-2016-3712
* an out of bounds write in 'cadence_uart' [1] 

I wasn't able to build it reliably on my x86_64 machine. Sometimes, it
would fail the test suite, and sometimes it would pass. It passed the
tests more reliably (--rounds=10) when parallel-tests are #f, so I made
that change.

[0]
https://lists.nongnu.org/archive/html/qemu-stable/2016-05/msg00008.html

[1]
http://git.qemu.org/?p=qemu.git;a=commit;h=5b7236f7256974d9c0286fa4837aa5e15ef5c629

           reply	other threads:[~2016-05-10  7:43 UTC|newest]

Thread overview: expand[flat|nested]  mbox.gz  Atom feed
 [parent not found: <20160510073544.B8BAA220062@vcs.savannah.gnu.org>]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160510074313.GA912@jasmine \
    --to=leo@famulari.name \
    --cc=guix-devel@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.