diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2023-08-01 04:18:44 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2023-08-07 04:40:43 -1000 |
| commit | 76f6267368fa6e3475b5ee94f00c188624ae5236 (patch) | |
| tree | 25cadf43bc0b368d8f4f6a0d276aa7d2e7c1bd93 /meta/recipes-devtools/qemu/qemu.inc | |
| parent | 2587c36e870ed0b4363e59444bad160b46e8959b (diff) | |
| download | poky-76f6267368fa6e3475b5ee94f00c188624ae5236.tar.gz | |
qemu: fix CVE-2023-3255
VNC: infinite loop in inflate_buffer() leads to denial of service
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-3255
Upstream patches:
https://gitlab.com/qemu-project/qemu/-/commit/d921fea338c1059a27ce7b75309d7a2e485f710b
(From OE-Core rev: 52711b1392ed0c5cbe4ddf70a94b21be2f4e6e58)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'meta/recipes-devtools/qemu/qemu.inc')
| -rw-r--r-- | meta/recipes-devtools/qemu/qemu.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-devtools/qemu/qemu.inc b/meta/recipes-devtools/qemu/qemu.inc index d5d210194b..83959f3c68 100644 --- a/meta/recipes-devtools/qemu/qemu.inc +++ b/meta/recipes-devtools/qemu/qemu.inc | |||
| @@ -95,6 +95,7 @@ SRC_URI = "https://download.qemu.org/${BPN}-${PV}.tar.xz \ | |||
| 95 | file://0001-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch \ | 95 | file://0001-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch \ |
| 96 | file://CVE-2023-0330.patch \ | 96 | file://CVE-2023-0330.patch \ |
| 97 | file://CVE-2023-3301.patch \ | 97 | file://CVE-2023-3301.patch \ |
| 98 | file://CVE-2023-3255.patch \ | ||
| 98 | " | 99 | " |
| 99 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" | 100 | UPSTREAM_CHECK_REGEX = "qemu-(?P<pver>\d+(\.\d+)+)\.tar" |
| 100 | 101 | ||