linux/poky.git/meta/recipes-devtools/qemu, branch hardknott-next

qemu: Exclude CVE-2020-3550[4/5/6] from cve-check

2021-06-02T22:32:44+00:00

CVE's affect ESP (NCR53C90) part of chip STP2000 (Master I/O). On Sparc32 it is the NCR89C100 part of the chip. On Macintosh Quadra it is NCR53C96. Both are not supported by yocto. (From OE-Core rev: e3ded54f9fd089382e6304604ca02d2305f16f21) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie

qemu: Exclude CVE-2018-18438 from cve-check

2021-05-22T09:01:02+00:00

The issues were investigated and found not to be an issue therefore exclude from checks. (From OE-Core rev: 7c7c3f3dd3bf7dc34f26d931acf562e93c45e807) Signed-off-by: Richard Purdie

qemu: Exclude CVE-2007-0998 from cve-check

2021-05-22T09:01:02+00:00

The CVE applies to the built-in VNC server but we don't enable this by default. (From OE-Core rev: 9ac9f2709a45fc7ce5b3b9a1a5e4f2e116ec2bb7) Signed-off-by: Richard Purdie

qemu: Exclude CVE-2017-5957 from cve-check

2021-05-22T09:01:02+00:00

The CVE applies to virglrender before 0.6.0 which we don't have. (From OE-Core rev: d8df88018fc90b2ff039ef58249f8581d22b1cc6) Signed-off-by: Richard Purdie (cherry picked from commit 9b5355375d028577de0b98e05992de6a088cb972) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

qemu: fix CVE-2021-3392

2021-05-11T11:02:29+00:00

(From OE-Core rev: 147bed3b6c591c2b20b4ac31f806ee153cc23322) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie (cherry picked from commit a0257aee7d80fc67c92877e2de1e4b98ece54174) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-20263

2021-05-11T11:02:29+00:00

virtiofs: drop remapped security.capability xattr as needed (From OE-Core rev: 56f948329e2780ce8845646b0bb499d82e197d85) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit 7ad71de89dd60700cbaad2df1937bc3d743112da) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2020-27821

2021-05-11T11:02:29+00:00

memory: clamp cached translation in case it points to an MMIO region (From OE-Core rev: 5240cce285d3baea513da0fc577b69e6f078a527) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit df92b3359743ed1837fa57df8035d121f5c5676b) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-20257

2021-04-30T13:37:26+00:00

(From OE-Core rev: 5b66ff7972951db973d12f3dae6ccecf3bc29e56) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit 547ac986a74cfcae39b691ebb92aadc8436443ea) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-3416

2021-04-30T13:37:26+00:00

(From OE-Core rev: 7a3ce8a79a6c682e1b38f757eb68534e0ce5589d) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit e2b5bc11d1b26b73b62e1a63cb75572793282dcb) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

qemu: fix CVE-2021-3409

2021-04-30T13:37:26+00:00

(From OE-Core rev: e6fd06544018f37943d4758ea57206f994cd04d3) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit e2fb8c15a64e1f5db678e8e95924da8c88a188c0) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie