qemu vulnerabilities (CVE-2014-0150, CVE-2014-2894)

[Michael Semenov]

Need to apply a patch for CVE-2014-0150, CVE-2014-2894, provided by Ubuntu.

Vulnerabilities links:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0150
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2894

Patches can be found here(for different versions):
https://launchpad.net/ubuntu/+source/qemu-kvm
https://launchpad.net/ubuntu/+source/qemu

[OSCI Robot (oscirobot)]

Package qemu has been built from changeset: http://gerrit.mirantis.com/16090
DEB Repository URL: http://osci-obs.vm.mirantis.net:82/ubuntu-fuel-5.0-stable-16090/ubuntu
You can build an ISO with this package:
make iso EXTRA_DEB_REPOS="http://osci-obs.vm.mirantis.net:82/ubuntu-fuel-5.0-stable-16090/ubuntu /"

[OSCI Robot (oscirobot)]

Package qemu has been built from changeset: http://gerrit.mirantis.com/16293
RPM Repository URL: http://osci-obs.vm.mirantis.net:82/centos-fuel-5.0-stable-16293/centos
You can build an ISO with this package:
make iso EXTRA_RPM_REPOS="osci-testing,http://osci-obs.vm.mirantis.net:82/centos-fuel-5.0-stable-16293/centos"

[Dmitry Borodaenko (angdraug)]

Patches above are targeted at 5.0, we're going to need the same updated packages for 4.1 and 5.1 as well.

[Michael Semenov (msemenov)]

Fixed by upgrading qemu to 2.0
https://bugs.launchpad.net/fuel/+bug/1321701

[Michael Semenov (msemenov)]

Fixed only in 5.1.
4.1.x - Won't Fix
5.0.x - Won't Fix