[PULL 0/2] Fixes 20220408 patches

[Gerd Hoffmann]

The following changes since commit 95a3fcc7487e5bef262e1f937ed8636986764c4e:

  Update version for v7.0.0-rc3 release (2022-04-06 21:26:13 +0100)

are available in the Git repository at:

  git://git.kraxel.org/qemu tags/fixes-20220408-pull-request

for you to fetch changes up to fa892e9abb728e76afcf27323ab29c57fb0fe7aa:

  ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (2022-04-07 
12:30:54 +0200)

----------------------------------------------------------------
two cursor/qxl related security fixes.

----------------------------------------------------------------

Mauro Matteo Cascella (2):
  display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
  ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)

 hw/display/qxl-render.c | 9 ++++++++-
 hw/display/vmware_vga.c | 2 ++
 ui/cursor.c             | 8 +++++++-
 3 files changed, 17 insertions(+), 2 deletions(-)

-- 
2.35.1