various fixes

[pve-qemu-kvm.git] / debian / patches / series

diff --git a/debian/patches/series b/debian/patches/series
index 65fd74065eaf2e485371319fee77e13203438201..6224119553f425deed1dab24eb9ed744147715e9 100644 (file)
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,6 @@
+xsa138-qemuu-1.patch
+xsa138-qemuu-2.patch
+xsa138-qemuu-3.patch
 fr-ca-keymap-corrections.diff
 adjust-path.diff
 fairsched.diff
@@ -19,4 +22,80 @@ backup-vma-restore-tolerate-a-size-difference-up-to-4M.patch
 backup-modify-job-api.patch
 backup-add-pve-monitor-commands.patch
 backup-add-dir-format.patch
+backup-do-not-return-errors-in-dump-callback.patch
+backup-vma-correctly-propagate-error.patch
+backup-vma-remove-async-queue.patch
+backup-run-flush-inside-coroutine.patch
+backup-do-not-use-bdrv-drain-all.patch
 internal-snapshot-async.patch
+disable-efi-enable-pxe-roms.patch
+backup-vma-allow-empty-backups.patch
+glusterfs-daemonize.patch
+gluster-backupserver.patch
+virtio-balloon-dimmfix1.patch
+virtio-balloon-dimmfix2.patch
+virtio-balloon-dimmfix3.patch
+add-qmp-get-link-status.patch
+virtio-scsi_fix_assert.patch
+0001-fdc-force-the-fifo-access-to-be-in-bounds-of-the-all.patch
+net-add-checks-to-validate-ring-buffer-pointers.patch
+CVE-2015-1779-incrementally-decode-websocket-frames.patch
+CVE-2015-1779-limit-size-of-HTTP-headers-from-websockets-clients.patch
+0001-ui-vnc-avoid-floating-point-exception.patch
+CVE-2015-7549-msix-pba-write-ro.patch
+CVE-2015-8558-ehci_make_idt_processing_more_robust.patch
+vmxnet3-host-memory-leakage.patch
+CVE-2015-8613-scsi-initialize-info-object.patch
+CVE-2015-8666-acpi-fix-buffer-overrun-on-migration.patch
+CVE-2015-8743-ne2000-ioport-bounds-check.patch
+CVE-2015-8744-vmxnet3-refine-l2-header-validation.patch
+CVE-2015-8745-vmxnet3-support-reading-imr-registers.patch
+CVE-2015-8619-hmp-sendkey-oob-fix.patch
+CVE-2016-1714-fw_cfg-add-check-to-validate-current-entry.patch
+CVE-2016-1922-i386-avoid-null-pointer-dereference.patch
+CVE-2016-1981-e1000-eliminate-infinite-loop.patch
+CVE-2016-1568-ide-ahci-reset-ncq-object.patch
+CVE-2015-3209-pcnet-oob.patch
+CVE-2015-7504-pcnet-validate-size.patch
+CVE-2015-7512-pcnet-rx-buffer-overflow.patch
+CVE-2015-7295-virtio-introduce-virtqueue_unmap_sg.patch
+CVE-2016-2391-usb-ohci-avoid-multiple-eof-timers.patch
+CVE-2016-2392-check-USB-configuration-descriptor-object.patch
+CVE-2016-2538-usb-check-RNDIS-message-length.patch
+CVE-2015-8817-exec-Respect-as_tranlsate_internal-length-clamp.patch
+0002-exec-do-not-clamp-accesses-to-MMIO-regions.patch
+CVE-2015-8818-exec-skip-MMIO-regions-correctly-in-cpu_physical_mem.patch
+0004-exec-clamp-accesses-against-the-MemoryRegionSection.patch
+CVE-2016-2841-net-ne2000-check-ring-buffer-control-registers.patch
+CVE-2016-2857-net-check-packet-payload-length.patch
+0001-rng-remove-the-unused-request-cancellation-code.patch
+0002-rng-move-request-queue-from-RngEgd-to-RngBackend.patch
+0003-rng-move-request-queue-cleanup-from-RngEgd-to-RngBac.patch
+0005-virtio-rng-ask-for-more-data-if-queue-is-not-fully-d.patch
+CVE-2016-2858-0004-rng-add-request-queue-support-to-rng-random.patch
+0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch
+0002-vga-add-vbe_enabled-helper.patch
+0003-vga-factor-out-vga-register-setup.patch
+0004-vga-update-vga-register-setup-on-vbe-changes.patch
+0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch
+0003-vga-add-sr_vbe-register-set.patch
+0001-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch
+0002-scsi-esp-fix-migration.patch
+0004-vmsvga-move-fifo-sanity-checks-to-vmsvga_fifo_length.patch
+0005-vmsvga-add-more-fifo-checks.patch
+0006-vmsvga-shadow-fifo-registers.patch
+0007-vmsvga-don-t-process-more-than-1024-fifo-commands-at.patch
+CVE-2016-4037-ehci-apply-limit-to-iTD-sidt-descriptors.patch
+CVE-2016-4952-scsi-pvscsi-check-command-descriptor-ring-buffer-siz.patch
+CVE-2016-5105-scsi-megasas-initialise-local-configuration-data-buf.patch
+CVE-2016-5106-scsi-megasas-use-appropriate-property-buffer-size.patch
+0001-megasas-use-PCI-DMA-APIs.patch
+CVE-2016-5107-scsi-megasas-check-read_queue_head-index-value.patch
+CVE-2016-5126-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch
+CVE-2016-5337-scsi-megasas-null-terminate-bios-version-buffer.patch
+CVE-2016-5338-scsi-esp-check-TI-buffer-index-before-read-write.patch
+CVE-2016-6833-net-vmxnet3-check-for-device_active-before-write.patch
+CVE-2016-6834-net-check-fragment-length-during-fragmentation.patch
+CVE-2016-6835-net-vmxnet-check-IP-header-length.patch
+CVE-2016-6836-net-vmxnet-initialise-local-tx-descriptor.patch
+CVE-2016-6888-net-vmxnet-use-g_new-for-pkt-initialisation.patch