* qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}]
[not found] ` <20160510073544.B8BAA220062@vcs.savannah.gnu.org>
@ 2016-05-10 7:43 ` Leo Famulari
0 siblings, 0 replies; only message in thread
From: Leo Famulari @ 2016-05-10 7:43 UTC (permalink / raw)
To: guix-devel
On Tue, May 10, 2016 at 07:35:44AM +0000, Leo Famulari wrote:
> lfam pushed a commit to branch master
> in repository guix.
>
> commit b6449e61262374581b342aa4920bd37f2292923e
> Author: Leo Famulari <leo@famulari.name>
> Date: Mon May 9 20:48:36 2016 -0400
>
> gnu: qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}].
>
> * gnu/packages/qemu.scm (qemu): Update to 2.5.1.1.
> [arguments]: Disable parallel tests.
QEMU has released 2.5.1.1 [0], which fixes these bugs:
* CVE-2015-8558
* CVE-2016-3710
* CVE-2016-3712
* an out of bounds write in 'cadence_uart' [1]
I wasn't able to build it reliably on my x86_64 machine. Sometimes, it
would fail the test suite, and sometimes it would pass. It passed the
tests more reliably (--rounds=10) when parallel-tests are #f, so I made
that change.
[0]
https://lists.nongnu.org/archive/html/qemu-stable/2016-05/msg00008.html
[1]
http://git.qemu.org/?p=qemu.git;a=commit;h=5b7236f7256974d9c0286fa4837aa5e15ef5c629
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2016-05-10 7:43 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20160510073544.11273.64305@vcs.savannah.gnu.org>
[not found] ` <20160510073544.B8BAA220062@vcs.savannah.gnu.org>
2016-05-10 7:43 ` qemu: Update to 2.5.1.1 [fixes CVE-2015-8558, CVE-2016-{3710, 3712}] Leo Famulari
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/guix.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.