diff options
author | Ross Burton <ross@burtonini.com> | 2021-08-05 16:15:52 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2021-08-14 12:01:44 +0100 |
commit | 18717d871e8e7ec0bc4887cb53eedc342e0c0951 (patch) | |
tree | e2020edd98a97dddd51482b1d97fde1b3741ea56 /meta/recipes-devtools/qemu/qemu.inc | |
parent | f21acadd379f365ece8ef1c6085911d63d20038f (diff) | |
download | poky-18717d871e8e7ec0bc4887cb53eedc342e0c0951.tar.gz |
qemu: fix virtio vhost-user-gpu CVEs
Fix a slew of CVEs (CVE-2021-3544, CVE-2021-3545, CVE-2021-3546) by
backporting the relevant patches from qemu's git.
(From OE-Core rev: ce850a5ce84f949d3114024c89ae3dd98fcbef41)
(From OE-Core rev: 8eb55f9eba667ab509baeb4328f9a080aa10e3fe)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit ce850a5ce84f949d3114024c89ae3dd98fcbef41)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/qemu/qemu.inc')
-rw-r--r-- | meta/recipes-devtools/qemu/qemu.inc | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index 3921546df7..5f7d82dfed 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc | |||
@@ -57,6 +57,13 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \ | |||
57 | file://CVE-2020-27821.patch \ | 57 | file://CVE-2020-27821.patch \ |
58 | file://CVE-2021-20263.patch \ | 58 | file://CVE-2021-20263.patch \ |
59 | file://CVE-2021-3392.patch \ | 59 | file://CVE-2021-3392.patch \ |
60 | file://0001-vhost-user-gpu-fix-memory-disclosure-in-virgl_cmd_ge.patch \ | ||
61 | file://0002-vhost-user-gpu-fix-resource-leak-in-vg_resource_crea.patch \ | ||
62 | file://0003-vhost-user-gpu-fix-memory-leak-in-vg_resource_attach.patch \ | ||
63 | file://0004-vhost-user-gpu-fix-memory-leak-while-calling-vg_reso.patch \ | ||
64 | file://0005-vhost-user-gpu-fix-memory-leak-in-virgl_cmd_resource.patch \ | ||
65 | file://0006-vhost-user-gpu-fix-memory-leak-in-virgl_resource_att.patch \ | ||
66 | file://0007-vhost-user-gpu-fix-OOB-write-in-virgl_cmd_get_capset.patch \ | ||
60 | " | 67 | " |
61 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" | 68 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" |
62 | 69 | ||