Re: [pve-devel] [PATCH kvm 1/2] fix various CVEs

2016-08-01 Thread Wolfgang Bumiller
applied both patches On Tue, Jul 26, 2016 at 11:51:37AM +0200, Thomas Lamprecht wrote: > For upstream commits 926cde5f3e4d2504ed161ed0 and > cc96677469388bad3d664793 is no CVE number assigned yet. > > Signed-off-by: Thomas Lamprecht > --- > Readded CVE CVE-2016-2391 and CVE-2016-5126 > > patch

[pve-devel] [PATCH kvm 1/2] fix various CVEs

2016-07-26 Thread Thomas Lamprecht
For upstream commits 926cde5f3e4d2504ed161ed0 and cc96677469388bad3d664793 is no CVE number assigned yet. Signed-off-by: Thomas Lamprecht --- Readded CVE CVE-2016-2391 and CVE-2016-5126 patch 0001-vga-add-sr_vbe-register-set.patch is only moved in the series file to match the commit order of the

[pve-devel] [PATCH kvm 1/2] fix various CVEs

2016-05-31 Thread Wolfgang Bumiller
CVE-2016-5105: scsi: megasas: initialise local configuration data buffer CVE-2016-5106: scsi: megasas: use appropriate property buffer size CVE-2016-5107: scsi: megasas: check 'read_queue_head' index value CVE-2016-5126: block/iscsi: avoid potential overflow of acb->task->cdb CVE-2016-4454: vmsvg