- Jun 28, 2016
-
-
Natanael Copa authored
-
Natanael Copa authored
(cherry picked from commit a98a9d2c)
-
Natanael Copa authored
fixes #5816
-
- Jun 27, 2016
-
-
Kaarle Ritvanen authored
-
Natanael Copa authored
fixes #5812
-
tun/tap devices are created inside /dev/net by default, so tun[0-9]* and tap[0-9]* doesn't match them. When you run qemu as an unprivileged user, that user must have write permission on the tun device. The group netdev seems to be appropriate for this and it's already included in the baselayout's groups. (cherry picked from commit bd4d9f02)
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
fixes #5805 (cherry picked from commit cd81e7c0)
-
Natanael Copa authored
we also need to disable RANDEXEC (cherry picked from commit d9a924f2)
-
Natanael Copa authored
this works around problem when building docker https://github.com/golang/go/issues/16081 (cherry picked from commit e7dca0ff)
-
gid 35 is already reserved for group "games"
-
Natanael Copa authored
(cherry picked from commit b064ccd9)
-
- Jun 24, 2016
-
-
Natanael Copa authored
-
fixes #5729 (cherry picked from commit f8a26e23)
-
Partly implements #5629, USB2 and Gadget (guest) mode only. (cherry picked from commit 21c7909d)
-
(cherry picked from commit c30e6525)
-
(cherry picked from commit bd87780d)
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
its obsolete (cherry picked from commit c3ea8c18)
-
Natanael Copa authored
-
Natanael Copa authored
-
Natanael Copa authored
The syscall is obsolete and unmaintained upstream. (cherry picked from commit 3dd68254)
-
Natanael Copa authored
fixes #3951 (cherry picked from commit 49ffc7a9)
-
Natanael Copa authored
fixes #5791 (cherry picked from commit 36ab20a1)
-
Natanael Copa authored
fixes #5738
-
Natanael Copa authored
fixes #5759 (cherry picked from commit 1b0a3e1c)
-
Leonardo Arena authored
CVE-2016-4962, XSA-175: Unsanitised guest input in libxl device handling code http://xenbits.xen.org/xsa/advisory-175.html CVE-2016-4480, XSA-176: x86 software guest page walk PS bit handling flaw http://xenbits.xen.org/xsa/advisory-176.html CVE-2016-4963, XSA-178: Unsanitised driver domain input in libxl device handling http://xenbits.xen.org/xsa/advisory-178.html CVE-2016-3710 CVE-2016-3712, XSA-179: QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks http://xenbits.xen.org/xsa/advisory-179.html CVE-2014-3672, XSA-180: Unrestricted qemu logging http://xenbits.xen.org/xsa/advisory-180.html
-
- Jun 23, 2016
-
-
Leonardo Arena authored
(cherry picked from commit 9d0fa15c)
-
Leonardo Arena authored
-