[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-stable] [Qemu-devel] [PATCH for-3.0] slirp: Correct size check
|
From: |
Markus Armbruster |
|
Subject: |
Re: [Qemu-stable] [Qemu-devel] [PATCH for-3.0] slirp: Correct size check in m_inc() |
|
Date: |
Tue, 07 Aug 2018 17:47:48 +0200 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) |
Peter Maydell <address@hidden> writes:
> On 7 August 2018 at 14:09, Daniel P. Berrangé <address@hidden> wrote:
>> On Tue, Aug 07, 2018 at 03:07:07PM +0200, Thomas Huth wrote:
>>> But 864036e251f54c9 was never part of an official QEMU release, was it?
>>> Or did it go into a stable release already? If not, I think you simply
>>> need both patches to fix the CVE instead.
>>
>> Ah possibly - I didn't look at where 864036e251f54c9 was actually
>> release or not. If its onyl git master, then yeah, we can use the
>> same CVE we already have.
>
> Yeah, we haven't released anything with 864036e251f54c9 in it yet.
> (In particular we did not flag it up for stable and so it is not
> in 2.12.1...)
Pointing out the obvious: this is a second opportunity to flag the CVE
fix for stable.