On 8/26/24 23:49, Eric Blake wrote:
> The following changes since commit f259e4cb8a8b4ef5463326fc214a7d8d7703d5de:
>
> Merge tag 'pull-trivial-patches' of https://gitlab.com/mjt0k/qemu into staging (2024-08-24 08:09:27 +1000)
>
> are available in the Git repository at:
>
> https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2024-08-26
>
> for you to fetch changes up to 3874f5f73c441c52f1c699c848d463b0eda01e4c:
>
> nbd/server: CVE-2024-7409: Avoid use-after-free when closing server (2024-08-26 08:42:42 -0500)
>
> ----------------------------------------------------------------
> NBD patches for 2024-08-26
>
> - One more patch for CVE-2024-7409 (use-after-free on nbd-server-stop)
>
> ----------------------------------------------------------------
> Eric Blake (1):
> nbd/server: CVE-2024-7409: Avoid use-after-free when closing server
>
> blockdev-nbd.c | 12 ++++++++----
> 1 file changed, 8 insertions(+), 4 deletions(-)
>
Applied, thanks. Please update https://wiki.qemu.org/ChangeLog/9.1 as appropriate.
r~