[Secure-testing-team] Bug#825210: qemu: CVE-2016-4952: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines

[Salvatore Bonaccorso]

Source: qemu
Version: 1.5.0~rc0+dfsg-1
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for qemu.

CVE-2016-4952[0]:
| scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data
| routines

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-4952

Please adjust the affected versions in the BTS as needed, but should
be from 1.5.0~rc0 on.

Regards,
Salvatore