kvmtool (0.20151104-1ubuntu0.1~esm1) xenial-security; urgency=medium

  * Fix FTBFS due to missing header file when using newer kernels.
    - debian/patches/0001-x86-kvm-cpu-Include-msr-macros.patch: Replace header
      file with necessary MSR_* macros in x86/kvm-cpu.c.
  * SECURITY UPDATE: buffer overflow allows virtual machine escape
    - debian/patches/CVE-2021-45464-prep1.patch: Add get_vq_count operation
      to virtio devices in include/kvm/virtio.h, virtio/9p.c,
      virtio/balloon.c, virtio/blk.c, virtio/console.c, virtio/net.c,
      virtio/rng.c, virtio/scsi.c.
    - debian/patches/CVE-2021-45464-prep2.patch: Make memory and IO BARs
      independent in virtio/pci.c.
    - debian/patches/CVE-2021-45464-1.patch: Add WARN_ONCE macro in
      include/kvm/util.h.
    - debian/patches/CVE-2021-45464-2.patch: Use u32 instead of int in
      pci_data_in/out in virtio/pci.c to simplify buffer size checking.
    - debian/patches/CVE-2021-45464-3.patch: Validate config accesses against
      the actual sizes of the configs in include/kvm/virtio-9p.h,
      include/kvm/virtio.h, virtio/9p.c, virtio/balloon.c, virtio/blk.c,
      virtio/console.c, virtio/mmio.c, virtio/net.c, virtio/pci.c,
      virtio/rng.c, virtio/scsi.c to prevent information leak.
    - debian/patches/CVE-2021-45464-4.patch: Prevent buffer overflows in
      QUEUE_NOTIFY and QUEUE_SEL in include/kvm/virtio.h, virtio/9p.c,
      virtio/balloon.c, virtio/blk.c, virtio/console.c, virtio/mmio.c,
      virtio/net.c, virtio/pci.c, virtio/rng.c, virtio/scsi.c.
    - CVE-2021-45464
  * SECURITY UPDATE: improper access control allows virtual machine escape
    - debian/patches/CVE-2023-2861.patch: Prevent guest from opening special
      device files in virtio/9p.c.
    - CVE-2023-2861

 -- Edwin Jiang <edwin.jiang@canonical.com>  Tue, 07 Apr 2026 10:46:04 -0400

kvmtool (0.20151104-1) sid; urgency=low

  * CI - kvmtool snapshot:
    - repository: git://git.kernel.org/pub/scm/linux/kernel/git/will/kvmtool.git
    - commit: 03c49af
    - build: https://ci.linaro.org/jenkins/job/build-kvmtool/57/

    - debian/ repository: git://anonscm.debian.org/collab-maint/kvmtool.git
    - debian/ commit: ce5757d

 -- Riku Voipio <riku.voipio@linaro.org>  Wed, 04 Nov 2015 10:45:40 +0000

kvmtool (0.20150908-1) sid; urgency=low

  * Initial release, closes: #797893
  * CI - kvmtool snapshot:
    - repository: git://git.kernel.org/pub/scm/linux/kernel/git/will/kvmtool.git
    - commit: 0161ed7

    - debian/ repository: git://anonscm.debian.org/collab-maint/kvmtool.git
    - debian/ commit: f256101

 -- Riku Voipio <riku.voipio@linaro.org>  Tue, 08 Sep 2015 15:40:11 +0300

