From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59671) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ai5Yq-000709-2w for qemu-devel@nongnu.org; Mon, 21 Mar 2016 15:32:21 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ai5Ym-0000ks-2n for qemu-devel@nongnu.org; Mon, 21 Mar 2016 15:32:20 -0400 References: <1458581313-19045-1-git-send-email-mdroth@linux.vnet.ibm.com> From: Cole Robinson Message-ID: <56F04C3E.8020504@redhat.com> Date: Mon, 21 Mar 2016 15:32:14 -0400 MIME-Version: 1.0 In-Reply-To: <1458581313-19045-1-git-send-email-mdroth@linux.vnet.ibm.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [Qemu-stable] [PATCH 00/35] Patch Round-up for stable 2.5.1, freeze on 2016-03-25 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Michael Roth , qemu-devel@nongnu.org Cc: qemu-stable@nongnu.org On 03/21/2016 01:27 PM, Michael Roth wrote: > Hi everyone, > > The following new patches are queued for QEMU stable v2.5.1: > > https://github.com/mdroth/qemu/commits/stable-2.5-staging > > The release is planned for 2016-03-29: > > http://wiki.qemu.org/Planning/2.5 > > Please respond here or CC qemu-stable@nongnu.org on any patches you > think should be included in the release. > > Testing/feedback is greatly appreciated. > Here's some patches we have in Fedora that aren't in your tree that IMO are stable candidates: 99b4cb7 ahci: Do not unmap NULL addresses 64ffbe0 hmp: fix sendkey out of bounds write (CVE-2015-8619) 4c1396c i386: avoid null pointer dereference 4ab0359 ide: ahci: reset ncq object to unused on error 362786f net: check packet payload length aa7f996 net: ne2000: fix bounds check in ioport operations 49d925c usb: check page select value while processing iTD fe3c546 usb: check RNDIS buffer offsets & length 64c9bc1 usb: check RNDIS message length 80eecda usb: check USB configuration descriptor object d62d9dc vmdk: Create streamOptimized as version 3 3db1d98 vmdk: Fix converting to streamOptimized vmdk patches are for https://bugzilla.redhat.com/show_bug.cgi?id=1299185 Rest are security issues Thanks, Cole