Debian: DSA 1284-1 Critical: QEMU Execution And DoS Security Issues

CVE-2007-1321
Tavis Ormandy discovered that the NE2000 network driver and the socket
code perform insufficient input validation, which might allow the
execution of arbitrary code through a heap overflow.

CVE-2007-1322
Tavis Ormandy discovered that the "icebp" instruction can be abused to
terminate the emulation, resulting in denial of service.

CVE-2007-1323
Tavis Ormandy discovered that the NE2000 network driver and the socket
code perform insufficient input validation, which might allow the
execution of arbitrary code through a heap overflow.

CVE-2007-1366
Tavis Ormandy discovered that the "aam" instruction can be abused to
crash qemu through a division by zero, resulting in denial of
service.

For the oldstable distribution (sarge) these problems have been fixed in
version 0.6.1+20050407-1sarge1.

For the stable distribution (etch) these problems have been fixed
in version 0.8.2-4etch1.

For the unstable distribution (sid) these prob...