[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [ANNOUNCE] QEMU 1.5.2 Stable released
|
From: |
Laszlo Ersek |
|
Subject: |
Re: [Qemu-devel] [ANNOUNCE] QEMU 1.5.2 Stable released |
|
Date: |
Fri, 26 Jul 2013 00:04:54 +0200 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130621 Thunderbird/17.0.7 |
On 07/25/13 23:44, Michael Roth wrote:
> The QEMU v1.5.2 stable release is now available at:
>
> http://wiki.qemu.org/download/qemu-1.5.2.tar.bz2
>
> This is release is solely to address a security issue (CVE-2013-2231) found
> in the QEMU Guest Agent on Windows. More details on the nature of the CVE
> can be found here:
>
> http://seclists.org/oss-sec/2013/q3/161
>
> There are 2 minor fixes for qemu-ga for Windows as well, though these are
> included mainly due to being dependencies of the CVE fix sent upstream.
>
> Thanks to Laszlo and the Red Hat security team for identifying/fixing the
> issue.
For identification and analysis Lev Veyde @ RH takes the credit.
Thanks,
Laszlo