projects
/
users
/
dwmw2
/
qemu.git
/ commitdiff
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
1343d33
)
slirp: update to fix CVE-2020-1983
author
Marc-André Lureau <marcandre.lureau@redhat.com>
Tue, 21 Apr 2020 17:02:27 +0000
(19:02 +0200)
committer
Michael Roth <mdroth@linux.vnet.ibm.com>
Mon, 22 Jun 2020 17:27:12 +0000
(12:27 -0500)
This is an update on the stable-4.2 branch of libslirp.git:
git shortlog
55ab21c9a3
..
2faae0f778f81
Marc-André Lureau (1):
Fix use-afte-free in ip_reass() (CVE-2020-1983)
CVE-2020-1983 is actually a follow up fix for commit
126c04acbabd7ad32c2b018fe10dfac2a3bc1210
("Fix heap overflow in
ip_reass on big packet input") which was was included in qemu
v4.1 (commit
e1a4a24d262ba5ac74ea1795adb3ab1cd574c7fb
"slirp: update
with CVE-2019-14378 fix").
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-id:
20200421170227
.843555-1-marcandre.lureau@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
(cherry picked from commit
7769c23774d1278f60b9e40d2c0b98784de6425f
)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
slirp
patch
|
blob
|
history
diff --git
a/slirp
b/slirp
index 126c04acbabd7ad32c2b018fe10dfac2a3bc1210..2faae0f778f818fadc873308f983289df697eb93 160000
(submodule)
--- a/
slirp
+++ b/
slirp
@@
-1
+1
@@
-Subproject commit
126c04acbabd7ad32c2b018fe10dfac2a3bc1210
+Subproject commit
2faae0f778f818fadc873308f983289df697eb93