Slirp cve 2019 14378 patches

[Qemu-devel] [PULL 0/1] Slirp cve 2019 14378 patches

Posted by Marc-André Lureau 4 years, 8 months ago

The following changes since commit 3bd6cbbb181b6ae60a1d1f33ccd325b45f71aa2a:

  Update version for v4.1.0-rc3 release (2019-07-30 22:02:05 +0100)

are available in the Git repository at:

  https://github.com/elmarco/qemu.git tags/slirp-CVE-2019-14378-pull-request

for you to fetch changes up to e1a4a24d262ba5ac74ea1795adb3ab1cd574c7fb:

  slirp: update with CVE-2019-14378 fix (2019-08-02 15:14:56 +0400)

----------------------------------------------------------------
Slirp CVE-2019-14378 pull request

----------------------------------------------------------------

Marc-André Lureau (1):
  slirp: update with CVE-2019-14378 fix

 slirp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-- 
2.22.0.545.g9c9b961d7e

Re: [Qemu-devel] [PULL 0/1] Slirp cve 2019 14378 patches

Posted by Peter Maydell 4 years, 8 months ago

On Fri, 2 Aug 2019 at 12:18, Marc-André Lureau
<marcandre.lureau@redhat.com> wrote:
>
> The following changes since commit 3bd6cbbb181b6ae60a1d1f33ccd325b45f71aa2a:
>
>   Update version for v4.1.0-rc3 release (2019-07-30 22:02:05 +0100)
>
> are available in the Git repository at:
>
>   https://github.com/elmarco/qemu.git tags/slirp-CVE-2019-14378-pull-request
>
> for you to fetch changes up to e1a4a24d262ba5ac74ea1795adb3ab1cd574c7fb:
>
>   slirp: update with CVE-2019-14378 fix (2019-08-02 15:14:56 +0400)
>
> ----------------------------------------------------------------
> Slirp CVE-2019-14378 pull request
>
> ----------------------------------------------------------------
>
> Marc-André Lureau (1):
>   slirp: update with CVE-2019-14378 fix
>
>  slirp | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)



Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/4.1
for any user-visible changes.

-- PMM

Re: [Qemu-devel] [PULL 0/1] Slirp cve 2019 14378 patches

Posted by Peter Maydell 4 years, 8 months ago

On Fri, 2 Aug 2019 at 12:18, Marc-André Lureau
<marcandre.lureau@redhat.com> wrote:
>
> The following changes since commit 3bd6cbbb181b6ae60a1d1f33ccd325b45f71aa2a:
>
>   Update version for v4.1.0-rc3 release (2019-07-30 22:02:05 +0100)
>
> are available in the Git repository at:
>
>   https://github.com/elmarco/qemu.git tags/slirp-CVE-2019-14378-pull-request
>
> for you to fetch changes up to e1a4a24d262ba5ac74ea1795adb3ab1cd574c7fb:
>
>   slirp: update with CVE-2019-14378 fix (2019-08-02 15:14:56 +0400)
>
> ----------------------------------------------------------------
> Slirp CVE-2019-14378 pull request
>
> ----------------------------------------------------------------
>
> Marc-André Lureau (1):
>   slirp: update with CVE-2019-14378 fix

Changes here since the last submodule update:

126c04a Fix heap overflow in ip_reass on big packet input
113a219 Update README.md build instructions
bc814a7 build-sys: rename project to libslirp

Ideally we'd just take the fix and no other changes,
but a readme change is harmless and the build-sys
change only affects builds with meson which QEMU
doesn't use, so this should be OK.

thanks
-- PMM