packages/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

spec: Update patch and changelog with !149 fix CVE-2021-3527 #I3U9T9 && CVE-2019-12067#I3VG5H && CVE-2021-20221 #I3UFOP !149

Browse Source 
ide: ahci: add check to avoid null dereference (CVE-2019-12067)
hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
usb: limit combined packets to 1 MiB (CVE-2021-3527)

Signed-off-by: Chen Qun<kuhn.chenqun@huawei.com>
This commit is contained in:
Chen Qun 2021-06-21 16:27:23 +08:00
parent 581470ea22
commit 707acdc80c
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
qemu.spec
View File

@ -318,6 +318,9 @@ Patch0305: vhost-user-gpu-fix-memory-leak-in-virgl_cmd_resource.patch
Patch0306: vhost-user-gpu-fix-memory-leak-in-virgl_resource_att.patch Patch0306: vhost-user-gpu-fix-memory-leak-in-virgl_resource_att.patch
Patch0307: vhost-user-gpu-fix-memory-disclosure-in-virgl_cmd_ge.patch Patch0307: vhost-user-gpu-fix-memory-disclosure-in-virgl_cmd_ge.patch
Patch0308: vhost-user-gpu-fix-OOB-write-in-virgl_cmd_get_capset.patch Patch0308: vhost-user-gpu-fix-OOB-write-in-virgl_cmd_get_capset.patch
Patch0309: ide-ahci-add-check-to-avoid-null-dereference-CVE-201.patch
Patch0310: hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch
Patch0311: usb-limit-combined-packets-to-1-MiB-CVE-2021-3527.patch
BuildRequires: flex BuildRequires: flex
BuildRequires: bison BuildRequires: bison
@ -705,6 +708,11 @@ getent passwd qemu >/dev/null || \
%endif %endif
%changelog %changelog
* Mon Jun 21 2021 Chen Qun <kuhn.chenqun@huawei.com>
- ide: ahci: add check to avoid null dereference (CVE-2019-12067)
- hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register
- usb: limit combined packets to 1 MiB (CVE-2021-3527)
* Tue Jun 15 2021 Chen Qun <kuhn.chenqun@huawei.com> * Tue Jun 15 2021 Chen Qun <kuhn.chenqun@huawei.com>
- vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544) - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544)
- vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544) - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544)