Re: [Qemu-devel] [Qemu-stable] [PATCH 00/35] Patch Round-up for stable 2.5.1, freeze on 2016-03-25

From: Cole Robinson <crobinso@redhat.com>
To: Michael Roth <mdroth@linux.vnet.ibm.com>, qemu-devel@nongnu.org
Cc: qemu-stable@nongnu.org
Subject: Re: [Qemu-devel] [Qemu-stable] [PATCH 00/35] Patch Round-up for stable 2.5.1, freeze on 2016-03-25
Date: Mon, 21 Mar 2016 15:32:14 -0400	[thread overview]
Message-ID: <56F04C3E.8020504@redhat.com> (raw)
In-Reply-To: <1458581313-19045-1-git-send-email-mdroth@linux.vnet.ibm.com>

On 03/21/2016 01:27 PM, Michael Roth wrote:
> Hi everyone,
> 
> The following new patches are queued for QEMU stable v2.5.1:
> 
>   https://github.com/mdroth/qemu/commits/stable-2.5-staging
> 
> The release is planned for 2016-03-29:
> 
>   http://wiki.qemu.org/Planning/2.5
> 
> Please respond here or CC qemu-stable@nongnu.org on any patches you
> think should be included in the release.
> 
> Testing/feedback is greatly appreciated.
> 

Here's some patches we have in Fedora that aren't in your tree that IMO are
stable candidates:

99b4cb7 ahci: Do not unmap NULL addresses
64ffbe0 hmp: fix sendkey out of bounds write (CVE-2015-8619)
4c1396c i386: avoid null pointer dereference
4ab0359 ide: ahci: reset ncq object to unused on error
362786f net: check packet payload length
aa7f996 net: ne2000: fix bounds check in ioport operations
49d925c usb: check page select value while processing iTD
fe3c546 usb: check RNDIS buffer offsets & length
64c9bc1 usb: check RNDIS message length
80eecda usb: check USB configuration descriptor object
d62d9dc vmdk: Create streamOptimized as version 3
3db1d98 vmdk: Fix converting to streamOptimized

vmdk patches are for https://bugzilla.redhat.com/show_bug.cgi?id=1299185
Rest are security issues

Thanks,
Cole