9p queue 2024-12-10

[PULL for-9.2 0/1] 9p queue 2024-12-10

Posted by Christian Schoenebeck 3 months, 4 weeks ago

The following changes since commit 1cf9bc6eba7506ab6d9de635f224259225f63466:

  Update version for v9.2.0-rc3 release (2024-12-03 17:56:12 +0000)

are available in the Git repository at:

  https://github.com/cschoenebeck/qemu.git tags/pull-9p-20241210

for you to fetch changes up to d06a9d843fb65351e0e4dc42ba0c404f01ea92b3:

  9pfs: fix regression regarding CVE-2023-2861 (2024-12-10 10:24:52 +0100)

----------------------------------------------------------------
* Fix a regression regarding CVE-2023-2861 with security_model=passthrough
  which caused certain sockets on guest to fail.

----------------------------------------------------------------
Christian Schoenebeck (1):
      9pfs: fix regression regarding CVE-2023-2861

 hw/9pfs/9p-util.h | 27 +++++++++++++++++----------
 1 file changed, 17 insertions(+), 10 deletions(-)

Re: [PULL for-9.2 0/1] 9p queue 2024-12-10

Posted by Peter Maydell 3 months, 4 weeks ago

On Tue, 10 Dec 2024 at 10:11, Christian Schoenebeck
<qemu_oss@crudebyte.com> wrote:
>
> The following changes since commit 1cf9bc6eba7506ab6d9de635f224259225f63466:
>
>   Update version for v9.2.0-rc3 release (2024-12-03 17:56:12 +0000)
>
> are available in the Git repository at:
>
>   https://github.com/cschoenebeck/qemu.git tags/pull-9p-20241210
>
> for you to fetch changes up to d06a9d843fb65351e0e4dc42ba0c404f01ea92b3:
>
>   9pfs: fix regression regarding CVE-2023-2861 (2024-12-10 10:24:52 +0100)
>
> ----------------------------------------------------------------
> * Fix a regression regarding CVE-2023-2861 with security_model=passthrough
>   which caused certain sockets on guest to fail.
>

Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/10.0
for any user-visible changes.

-- PMM

Re: [PULL for-9.2 0/1] 9p queue 2024-12-10

Posted by Peter Maydell 3 months, 4 weeks ago

On Tue, 10 Dec 2024 at 10:11, Christian Schoenebeck
<qemu_oss@crudebyte.com> wrote:
>
> The following changes since commit 1cf9bc6eba7506ab6d9de635f224259225f63466:
>
>   Update version for v9.2.0-rc3 release (2024-12-03 17:56:12 +0000)
>
> are available in the Git repository at:
>
>   https://github.com/cschoenebeck/qemu.git tags/pull-9p-20241210
>
> for you to fetch changes up to d06a9d843fb65351e0e4dc42ba0c404f01ea92b3:
>
>   9pfs: fix regression regarding CVE-2023-2861 (2024-12-10 10:24:52 +0100)
>
> ----------------------------------------------------------------
> * Fix a regression regarding CVE-2023-2861 with security_model=passthrough
>   which caused certain sockets on guest to fail.
>
> ----------------------------------------------------------------

The commit message says it's a fix for a bug in commit f6b0de53fb,
which was in the 9.1 release. Is this really a regression since 9.1 ?

More generally, if you want to send a change on the day we're
due to make the final release, it needs to come with a clear
justification for why the bug is critical enough to force us
to delay the release by a week.

thanks
-- PMM