diff options
author | Hitendra Prajapati <hprajapati@mvista.com> | 2022-07-27 13:25:44 +0530 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-08-08 16:23:34 +0100 |
commit | 25606f450dc91ef1a09cfa3d5117b1e1e4bcc6f2 (patch) | |
tree | 8cddc568936187cf24c70470babc8ec9e00ecb21 /meta/recipes-devtools/qemu/qemu.inc | |
parent | 9e7f4a7db257a865100e135f076cc31c14a71bd3 (diff) | |
download | poky-25606f450dc91ef1a09cfa3d5117b1e1e4bcc6f2.tar.gz |
qemu: CVE-2022-35414 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash
Source: https://github.com/qemu/qemu
MR: 119832
Type: Security Fix
Disposition: Backport from https://github.com/qemu/qemu/commit/418ade7849ce7641c0f7333718caf5091a02fd4c
ChangeID: 1246afd7bb950d2d5fe2e198961797c0fa14ac00
Description:
CVE-2022-35414 qemu: can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.
(From OE-Core rev: 7c3043df56b3090138fe56f8c06df5ca08cafd26)
Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/qemu/qemu.inc')
-rw-r--r-- | meta/recipes-devtools/qemu/qemu.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 4135619fc6..10b4280b23 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc | |||
@@ -98,6 +98,7 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \ | |||
98 | file://CVE-2020-13253_4.patch \ | 98 | file://CVE-2020-13253_4.patch \ |
99 | file://CVE-2020-13253_5.patch \ | 99 | file://CVE-2020-13253_5.patch \ |
100 | file://CVE-2020-13791.patch \ | 100 | file://CVE-2020-13791.patch \ |
101 | file://CVE-2022-35414.patch \ | ||
101 | " | 102 | " |
102 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" | 103 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" |
103 | 104 | ||