Re: [Qemu-stable] [PATCH 00/35] Patch Round-up for stable 2.5.1, freeze on 2016-03-25

[Cole Robinson]

On 03/21/2016 01:27 PM, Michael Roth wrote:
> Hi everyone,
> 
> The following new patches are queued for QEMU stable v2.5.1:
> 
>   https://github.com/mdroth/qemu/commits/stable-2.5-staging
> 
> The release is planned for 2016-03-29:
> 
>   http://wiki.qemu.org/Planning/2.5
> 
> Please respond here or CC address@hidden on any patches you
> think should be included in the release.
> 
> Testing/feedback is greatly appreciated.
> 

Here's some patches we have in Fedora that aren't in your tree that IMO are
stable candidates:

99b4cb7 ahci: Do not unmap NULL addresses
64ffbe0 hmp: fix sendkey out of bounds write (CVE-2015-8619)
4c1396c i386: avoid null pointer dereference
4ab0359 ide: ahci: reset ncq object to unused on error
362786f net: check packet payload length
aa7f996 net: ne2000: fix bounds check in ioport operations
49d925c usb: check page select value while processing iTD
fe3c546 usb: check RNDIS buffer offsets & length
64c9bc1 usb: check RNDIS message length
80eecda usb: check USB configuration descriptor object
d62d9dc vmdk: Create streamOptimized as version 3
3db1d98 vmdk: Fix converting to streamOptimized

vmdk patches are for https://bugzilla.redhat.com/show_bug.cgi?id=1299185
Rest are security issues

Thanks,
Cole