Commit - rpms/qemu - 3a13ddd5148f36dd22979001991bda4fafb9430a

    CVE-2016-7155: pvscsi: OOB read and infinite loop (bz #1373463)
    CVE-2016-7156: pvscsi: infinite loop when building SG list (bz #1373480)
    CVE-2016-7156: pvscsi: infinite loop when processing IO requests (bz #1373480)
    CVE-2016-7170: vmware_vga: OOB stack memory access (bz #1374709)
    CVE-2016-7157: mptsas: invalid memory access (bz #1373505)
    CVE-2016-7466: usb: xhci memory leakage during device unplug (bz #1377838)
    CVE-2016-7423: scsi: mptsas: OOB access (bz #1376777)
    CVE-2016-7422: virtio: null pointer dereference (bz #1376756)
    CVE-2016-7908: net: Infinite loop in mcf_fec_do_tx (bz #1381193)
    CVE-2016-8576: usb: xHCI: infinite loop vulnerability (bz #1382322)
    CVE-2016-7995: usb: hcd-ehci: memory leak (bz #1382669)

0001-vmw_pvscsi-check-page-count-while-initialising-descr.patch

file added

+82

0002-scsi-pvscsi-limit-loop-to-fetch-SG-list.patch

file added

+61

0003-scsi-pvscsi-limit-process-IO-loop-to-ring-size.patch

file added

+35

0004-vmsvga-correct-bitmap-and-pixmap-size-checks.patch

file added

+42

0005-scsi-mptconfig-fix-an-assert-expression.patch

file added

+33

0006-scsi-mptconfig-fix-misuse-of-MPTSAS_CONFIG_PACK.patch

file added

+37

0007-usb-xhci-fix-memory-leak-in-usb_xhci_exit.patch

file added

+29

0008-scsi-mptsas-use-g_new0-to-allocate-MPTSASRequest-obj.patch

file added

+32

0009-virtio-add-check-for-descriptor-s-mapped-address.patch

file added

+35

0010-net-mcf-limit-buffer-descriptor-count.patch

file added

+49

0011-xhci-limit-the-number-of-link-trbs-we-are-willing-to.patch

file added

+65

0012-usb-ehci-fix-memory-leak-in-ehci_process_itd.patch

file added

+29

0013-usb-redir-allocate-buffers-before-waking-up-the-host.patch ~~qemu-2.7.0-usb-redirect-wakeup.patch~~

file renamed

+25 -4

qemu.spec

file modified

+42 -2

rpms / qemu

Source Code

3a13dd CVE-2016-7155: pvscsi: OOB read and infinite loop (bz #1373463)

Authored and Committed by crobinso 8 years ago

`3a13dd` CVE-2016-7155: pvscsi: OOB read and infinite loop (bz #1373463)