From f1d6caff3915312937ac1206189a9dec204a6293 Mon Sep 17 00:00:00 2001 From: Chen Qun Date: Tue, 15 Jun 2021 16:27:11 +0800 Subject: [PATCH] spec: Update patch and changelog with !141 fix CVE-2021-3544 #I3VG5I && fix CVE-2021-3545 #I3V9I8 && fix CVE-2021-3546 #I3V9I7 !141 vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544) vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544) vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544) vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544) vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544) vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545) vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546) Signed-off-by: Chen Qun --- qemu.spec | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/qemu.spec b/qemu.spec index 52fb795..6e00885 100644 --- a/qemu.spec +++ b/qemu.spec @@ -327,6 +327,13 @@ Patch0314: imx7-ccm-add-digprog-mmio-write-method.patch Patch0315: util-cacheinfo-fix-crash-when-compiling-with-uClibc.patch Patch0316: arm-cpu-Fixed-function-undefined-error-at-compile-ti.patch Patch0317: blockjob-Fix-crash-with-IOthread-when-block-commit-a.patch +Patch0318: vhost-user-gpu-fix-resource-leak-in-vg_resource_crea.patch +Patch0319: vhost-user-gpu-fix-memory-leak-in-vg_resource_attach.patch +Patch0320: vhost-user-gpu-fix-memory-leak-while-calling-vg_reso.patch +Patch0321: vhost-user-gpu-fix-memory-leak-in-virgl_cmd_resource.patch +Patch0322: vhost-user-gpu-fix-memory-leak-in-virgl_resource_att.patch +Patch0323: vhost-user-gpu-fix-memory-disclosure-in-virgl_cmd_ge.patch +Patch0324: vhost-user-gpu-fix-OOB-write-in-virgl_cmd_get_capset.patch BuildRequires: flex BuildRequires: bison @@ -720,6 +727,15 @@ getent passwd qemu >/dev/null || \ %endif %changelog +* Tue Jun 15 2021 Chen Qun +- vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544) +- vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544) +- vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544) +- vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544) +- vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544) +- vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545) +- vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546) + * Fri May 28 2021 Chen Qun - blockjob: Fix crash with IOthread when block commit after snapshot