From 91aea8949695cae360f100075ec21887ba4256b9 Mon Sep 17 00:00:00 2001 From: Chen Qun Date: Thu, 18 Mar 2021 22:02:10 +0800 Subject: [PATCH] spec: Update patch and changelog with !85 fix CVE-2021-20203 #I3A34O !85 net: vmxnet3: validate configuration values during activate (CVE-2021-20203) Signed-off-by: Chen Qun --- qemu.spec | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/qemu.spec b/qemu.spec index c35f251..8d9c3c7 100644 --- a/qemu.spec +++ b/qemu.spec @@ -238,6 +238,7 @@ Patch0225: ati-use-vga_read_byte-in-ati_cursor_define.patch Patch0226: sd-sdhci-assert-data_count-is-within-fifo_buffer.patch Patch0227: msix-add-valid.accepts-methods-to-check-address.patch Patch0228: ide-atapi-check-io_buffer_index-in-ide_atapi_cmd_rep.patch +Patch0229: net-vmxnet3-validate-configuration-values-during-act.patch BuildRequires: flex BuildRequires: bison @@ -583,6 +584,9 @@ getent passwd qemu >/dev/null || \ %endif %changelog +* Thu Mar 18 2021 Chen Qun +- net: vmxnet3: validate configuration values during activate (CVE-2021-20203) + * Fri Feb 26 2021 Huawei Technologies Co., Ltd - ide:atapi: check io_buffer_index in ide_atapi_cmd_reply_end