[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH for-3.0] slirp: Correct size check in m_inc()

From: Peter Maydell
Subject: Re: [Qemu-devel] [PATCH for-3.0] slirp: Correct size check in m_inc()
Date: Tue, 7 Aug 2018 16:58:01 +0100

On 7 August 2018 at 16:47, Markus Armbruster <address@hidden> wrote:
> Peter Maydell <address@hidden> writes:
>> On 7 August 2018 at 14:09, Daniel P. Berrangé <address@hidden> wrote:
>>> On Tue, Aug 07, 2018 at 03:07:07PM +0200, Thomas Huth wrote:
>>>> But 864036e251f54c9 was never part of an official QEMU release, was it?
>>>> Or did it go into a stable release already? If not, I think you simply
>>>> need both patches to fix the CVE instead.
>>> Ah possibly - I  didn't look at where 864036e251f54c9 was actually
>>> release or not. If its onyl git master, then yeah, we can use the
>>> same CVE we already have.
>> Yeah, we haven't released anything with 864036e251f54c9 in it yet.
>> (In particular we did not flag it up for stable and so it is not
>> in 2.12.1...)
> Pointing out the obvious: this is a second opportunity to flag the CVE
> fix for stable.

Well, as long as we get both halves of it, yes :-)
(ie commits 864036e251f54c9 + 09b94ac0f29db3b022a77a).

-- PMM

reply via email to

[Prev in Thread] Current Thread [Next in Thread]