All of lore.kernel.org
 help / color / mirror / Atom feed
From: Michael Roth <mdroth@linux.vnet.ibm.com>
To: qemu-devel@nongnu.org
Cc: pmatouse@redhat.com, aliguori@us.ibm.com, lersek@redhat.com,
	qemu-stable@nongnu.org, lveyde@redhat.com
Subject: [Qemu-devel] [ANNOUNCE] QEMU 1.5.2 Stable released
Date: Thu, 25 Jul 2013 16:44:43 -0500	[thread overview]
Message-ID: <20130725214443.16294.56339@loki> (raw)

The QEMU v1.5.2 stable release is now available at:

  http://wiki.qemu.org/download/qemu-1.5.2.tar.bz2

This is release is solely to address a security issue (CVE-2013-2231) found
in the QEMU Guest Agent on Windows. More details on the nature of the CVE
can be found here:

http://seclists.org/oss-sec/2013/q3/161

There are 2 minor fixes for qemu-ga for Windows as well, though these are
included mainly due to being dependencies of the CVE fix sent upstream.

Thanks to Laszlo and the Red Hat security team for identifying/fixing the
issue.

ff4be47: Update VERSION for 1.5.2 release (Michael Roth)
be161ae: qga: escape cmdline args when registering win32 service (CVE-2013-2231) (Laszlo Ersek)
bb31546: ga_install_service(): nest error paths more idiomatically (Laszlo Ersek)
af0bbf8: qga/service-win32.c: diagnostic output should go to stderr (Laszlo Ersek)
31c6ed2: qga: save state directory in ga_install_service() (Laszlo Ersek)
c432c7d: qga: remove undefined behavior in ga_install_service() (Laszlo Ersek)

             reply	other threads:[~2013-07-25 21:44 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-07-25 21:44 Michael Roth [this message]
2013-07-25 22:04 ` [Qemu-devel] [ANNOUNCE] QEMU 1.5.2 Stable released Laszlo Ersek
2013-07-26 10:09 ` Daniel P. Berrange
2013-07-31 14:19 ` Miroslav Rezanina
2013-08-03  0:00   ` Michael Roth

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20130725214443.16294.56339@loki \
    --to=mdroth@linux.vnet.ibm.com \
    --cc=aliguori@us.ibm.com \
    --cc=lersek@redhat.com \
    --cc=lveyde@redhat.com \
    --cc=pmatouse@redhat.com \
    --cc=qemu-devel@nongnu.org \
    --cc=qemu-stable@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.