From 3e666afc648543a2dd73c577569e34d0d8d996ff Mon Sep 17 00:00:00 2001 From: Sona Sarmadi Date: Mon, 2 May 2016 09:33:26 +0200 Subject: qemu: net: CVE-2015-5279 Fixes heap overflow vulnerability in ne2000_receive() function. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279 Reference to upstream patch: http://git.qemu.org/?p=qemu.git;a=commit;h=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755 Signed-off-by: Sona Sarmadi Signed-off-by: Tudor Florea --- meta/recipes-devtools/qemu/qemu_2.4.0.bb | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-devtools/qemu/qemu_2.4.0.bb') diff --git a/meta/recipes-devtools/qemu/qemu_2.4.0.bb b/meta/recipes-devtools/qemu/qemu_2.4.0.bb index 9435d969f5..6c8d1b78dd 100644 --- a/meta/recipes-devtools/qemu/qemu_2.4.0.bb +++ b/meta/recipes-devtools/qemu/qemu_2.4.0.bb @@ -22,6 +22,7 @@ SRC_URI += "file://configure-fix-Darwin-target-detection.patch \ file://CVE-2016-2198.patch \ file://vnc-CVE-2015-5225.patch \ file://net-CVE-2015-5278.patch \ + file://net-CVE-2015-5279.patch \ " SRC_URI_prepend = "http://wiki.qemu-project.org/download/${BP}.tar.bz2" SRC_URI[md5sum] = "186ee8194140a484a455f8e3c74589f4" -- cgit v1.2.3-54-g00ecf