From: Peter Korsgaard <peter@korsgaard.com>
To: Clement Ramirez <ramirez.clement3@gmail.com>
References: <20231011071244.419815-1-ramirez.clement3@gmail.com>
Date: Sun, 15 Oct 2023 11:02:23 +0200
In-Reply-To: <20231011071244.419815-1-ramirez.clement3@gmail.com> (Clement
 Ramirez's message of "Wed, 11 Oct 2023 09:12:44 +0200")
Message-ID: <87cyxgxnq8.fsf@48ers.dk>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Subject: Re: [Buildroot] [PATCH v2] package/qemu: security bump version to
 8.1.1
Precedence: list
Cc: Romain Naour <romain.naour@gmail.com>, buildroot@buildroot.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: buildroot-bounces@buildroot.org
Sender: "buildroot" <buildroot-bounces@buildroot.org>

>>>>> "Clement" == Clement Ramirez <ramirez.clement3@gmail.com> writes:

 > Fixes the following CVEs :
 >     - CVE-2023-4135 (https://gitlab.com/qemu-project/qemu/-/commit/ecb1b7b082d3b7dceff0e486a114502fc52c0fdf)
 >     - CVE-2023-3354 (https://gitlab.com/qemu-project/qemu/-/commit/10be627d2b5ec2d6b3dce045144aa739eef678b4)
 >     - CVE-2023-3180 (https://gitlab.com/qemu-project/qemu/-/commit/9d38a8434721a6479fe03fb5afb150ca793d3980)

 > The changes between 8.1.0 and 8.1.1 are only limited to bug fixes:

 > 6bb4a8a47a (v8.1.1) Update version for 8.1.1 release
 > 045fa84784 tpm: fix crash when FD >= 1024 and unnecessary errors due to EINTR
 > 56270e5d3d meson: Fix targetos match for illumos and Solaris.
 > 60da8301fe s390x/ap: fix missing subsystem reset registration
 > 8b479229ff ui: fix crash when there are no active_console
 > d4919bbcc2 virtio-gpu/win32: set the destroy function on load
 > cae7dc1452 target/riscv: Allocate itrigger timers only once
 > 7385e00665 target/riscv/pmp.c: respect mseccfg.RLB for pmpaddrX changes
 > 1d4fb5815c target/riscv: fix satp_mode_finalize() when satp_mode.supported = 0
 > b822207513 hw/riscv: virt: Fix riscv,pmu DT node path
 > 2947da750e linux-user/riscv: Use abi type for target_ucontext
 > 60a7f5c8fe hw/intc: Make rtc variable names consistent
 > 566dac7127 hw/intc: Fix upper/lower mtime write calculation
 > 8ae20123b6 target/riscv: Fix zfa fleq.d and fltq.d
 > 6c24b6000b target/riscv: Fix page_check_range use in fault-only-first
 > 987e90cfd2 target/riscv/cpu.c: add zmmul isa string
 > b9f83298b9 hw/char/riscv_htif: Fix the console syscall on big endian hosts
 > 3d6251f416 hw/char/riscv_htif: Fix printing of console characters on big endian hosts
 > 9832a670b3 arm64: Restore trapless ptimer access
 > df33ce9b6d virtio: Drop out of coroutine context in virtio_load()
 > eeee989f72 qxl: don't assert() if device isn't yet initialized
 > 93d4107937 hw/net/vmxnet3: Fix guest-triggerable assert()
 > 6356785daa docs tests: Fix use of migrate_set_parameter
 > 01bf87c8e3 qemu-options.hx: Rephrase the descriptions of the -hd* and -cdrom options
 > 25ec23ab3f hw/i2c/aspeed: Fix TXBUF transmission start position error
 > 9dc6f05cc8 hw/i2c/aspeed: Fix Tx count and Rx size error in buffer pool mode
 > d5361580ac hw/ide/ahci: fix broken SError handling
 > e8f5ca57e4 hw/ide/ahci: fix ahci_write_fis_sdb()
 > 4448c345bc hw/ide/ahci: PxCI should not get cleared when ERR_STAT is set
 > 4fbd5a5202 hw/ide/ahci: PxSACT and PxCI is cleared when PxCMD.ST is cleared
 > 16cc9594d2 hw/ide/ahci: simplify and document PxCI handling
 > 1efefd13ca hw/ide/ahci: write D2H FIS when processing NCQ command
 > c2e0495e3c hw/ide/core: set ERR_STAT in unsupported command completion
 > f64f1f8704 target/ppc: Fix LQ, STQ register-pair order for big-endian
 > 9f54fef2c0 target/ppc: Flush inputs to zero with NJ in ppc_store_vscr
 > 5358980d33 hw/ppc/e500: fix broken snapshot replay
 > 6864f05cb1 ppc/vof: Fix missed fields in VOF cleanup
 > 0175121c6c ui/dbus: Properly dispose touch/mouse dbus objects
 > e975434d62 target/i386: raise FERR interrupt with iothread locked
 > e5e77f256f linux-user: Adjust brk for load_bias
 > 645b87f650 target/arm: properly document FEAT_CRC32
 > 86d7b08d71 block-migration: Ensure we don't crash during migration cleanup
 > 5691fbf440 softmmu: Assert data in bounds in iotlb_to_section
 > 441106eebb docs/about/license: Update LICENSE URL
 > 63188a00bb target/arm: Fix 64-bit SSRA
 > 7012e20b2d target/arm: Fix SME ST1Q
 > c8e381d672 accel/kvm: Specify default IPA size for arm64
 > 34808d041c kvm: Introduce kvm_arch_get_default_type hook
 > 01f6417f15 include/hw/virtio/virtio-gpu: Fix virtio-gpu with blob on big endian hosts
 > 14a8213b75 target/s390x: Check reserved bits of VFMIN/VFMAX's M5
 > c12eddbd48 target/s390x: Fix VSTL with a large length
 > 880e82ed78 target/s390x: Use a 16-bit immediate in VREP
 > 5980189e96 target/s390x: Fix the "ignored match" case in VSTRS

 > Signed-off-by: Clement Ramirez <ramirez.clement3@gmail.com>

 > ---
 > Changes v1 -> v2:
 >   - add a comment to explain why ignoring CVEs is required

Committed, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot