fu-shanqing
f68cfde3b0
add '--enable-slirp' compilation options
2022-10-24 10:10:07 +08:00
openeuler-ci-bot
17274867fb
!668 fix CVE-2022-3165 by ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext
...
From: @bobychen
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-10-23 01:43:08 +00:00
bobychen
40d7d3a15d
ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (CVE-2022-3165)
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
Signed-off-by: bobychen <boby.chen@huawei.com>
2022-10-21 09:52:59 +08:00
openeuler-ci-bot
1e328ee9b2
!655 社区上游patch回合,bugfix
...
From: @wanborj
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-09-30 11:11:02 +00:00
wanborj
d72c1d27b2
Backport upstream bugfix
...
Signed-off-by: wanborj <wanbo13@huawei.com>
2022-09-30 17:51:42 +08:00
openeuler-ci-bot
c4e55971db
!652 上游社区Patch回合,Bugfix
...
From: @omnihorizon
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-09-30 09:31:09 +00:00
zhangxinhao
a2786109b9
Backport upstream bugfix
...
Signed-off-by: zhangxinhao <zhangxinhao1@huawei.com>
2022-09-30 16:47:15 +08:00
openeuler-ci-bot
ee2367650b
!653 修复spec文件中patch名未更新的问题
...
From: @ooorz
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-09-30 08:31:44 +00:00
Zhang Bo
9e73b27bd8
spec: fix wrong patch name
...
net-tulip-Restrict-DMA-engine-to-memories.patch was named with CVE-XX
surfixes, the spec remains that old name, change the name there.
Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 15:45:10 +08:00
openeuler-ci-bot
87fe3e9f1f
!648 fix CVE-2022-2962
...
From: @ooorz
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-09-30 07:06:52 +00:00
Zhang Bo
69b69596a2
net: tulip: Restrict DMA engine to memories(CVE-2022-2962)
...
fix CVE-2022-2962.
The DMA engine is started by I/O access and then itself accesses the
I/O registers, triggering a teentrancy bug.
Fix this bug by restricting the DMA engine to memories regions.
Signed-off-by: Zhang Bo <oscar.zhangbo@huawei.com>
2022-09-30 14:28:43 +08:00
openeuler-ci-bot
035e0d4ebe
!640 hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
...
From: @yezengruan
Reviewed-by: @aven6
Signed-off-by: @aven6
2022-09-07 09:08:11 +00:00
yezengruan
9e16c84fbf
hw/usb/hcd-xhci: Fix unbounded loop in xhci_ring_chain_length() (CVE-2020-14394)
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-09-03 09:17:16 +08:00
openeuler-ci-bot
aca01ae87e
!634 fix CVE-2022-0216 (openeuler !332 )
...
From: @yezengruan
Reviewed-by: @aven6
Signed-off-by: @aven6
2022-09-01 01:39:35 +00:00
yezengruan
9b71f5aa79
fix CVE-2022-0216 (openeuler !332 )
...
hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued
tests/qtest: Add fuzz-lsi53c895a-test
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216)
scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-30 19:33:44 +08:00
openeuler-ci-bot
89d0106481
!630 回合upstream nbd重构后的相关patch
...
From: @ooorz
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-08-30 00:55:38 +00:00
Zhang Bo
6e9beed308
backport nbd related patches to avoid vm crash during migration
...
block-nbd was refacted during release 6.2.0, but we didn't induced
all the needed patches within the 6.2.0 baseline, which leads to
vm crash during migration.
the reasons are as below:
when iothread is configured, the coroutines should get back to
the exact iothread that was out of. But within the 6.2.0 baseline,
patches were missing, nbd related coroutine didn't have its related
aio_context. It in fact get to the mainline aio_context, the mistaken
context leads to vm crash.
2022-08-29 17:09:05 +08:00
openeuler-ci-bot
aca75fb673
!627 [sync] PR-625: Qemu update to version 10:6.2.0-46
...
From: @openeuler-sync-bot
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-08-27 01:08:58 +00:00
yezengruan
65770dadad
Qemu update to version 10:6.2.0-46
...
vhost-user: remove VirtQ notifier restore
vhost-user: fix VirtQ notifier cleanup
enable vDPA build params
Provides qemu-kvm for upgrade
Signed-off-by: yezengruan <yezengruan@huawei.com>
(cherry picked from commit a6c5c96c0b65904db08e803692a01447553a725a)
2022-08-25 17:15:08 +08:00
openeuler-ci-bot
9e1d641a30
!619 Qemu update to version 6.2.0-45
...
From: @yezengruan
Reviewed-by: @aven6
Signed-off-by: @aven6
2022-08-11 11:54:37 +00:00
yezengruan
bb777b4dce
Qemu update to version 6.2.0-45
...
numa: Enable numa for SGX EPC sections
target/ppc: enhance error handling in kvmppc_read_int*
fix pointer double free in func qemu_savevm_state_complete_precopy_non_iterable
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-08-11 19:19:20 +08:00
openeuler-ci-bot
9931eba224
!613 [sync] PR-612: add Requires libgcc
...
From: @openeuler-sync-bot
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-07-26 10:14:58 +00:00
yezengruan
9d2610934b
add Requires libgcc
...
(cherry picked from commit 56beae0617d658b8100fabcf91bed5568e4a8b99)
2022-07-26 17:00:15 +08:00
openeuler-ci-bot
89905759b8
!604 fix CVE-2022-35414
...
From: @cenhuilin
Reviewed-by: @yezengruan
Signed-off-by: @yezengruan
2022-07-20 01:00:40 +00:00
cenhuilin
5054179fc5
fix CVE-2022-35414
2022-07-19 10:02:23 +00:00
openeuler-ci-bot
c51ae07005
!600 Fix CVE-2022-0358 and CVE-2021-4158
...
From: @aven6
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-07-13 01:08:30 +00:00
l00500761
8b199ba599
Fix CVE-2022-0358 and CVE-2021-4158
2022-07-12 15:41:12 +08:00
openeuler-ci-bot
ef91d7e09d
!595 hw/nvme: fix CVE-2021-3929 (openeuler !313 )
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-06-23 01:57:28 +00:00
yezengruan
36eaeb0b27
hw/nvme: fix CVE-2021-3929 (openeuler !313 )
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-22 10:38:05 +08:00
openeuler-ci-bot
0bac9fa8ce
!592 spec: Add qemu-system-riscv rpm package
...
From: @saarloos
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-06-20 13:48:21 +00:00
saarloos
1bf06bf4ad
Add riscv rpm include qemu-system-riscv32 and qemu-system-riscv64
2022-06-20 20:28:47 +08:00
openeuler-ci-bot
4d1ce28a1b
!589 fix CVE-2021-3611
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-06-11 01:52:46 +00:00
yezengruan
cbe2a01c81
fix CVE-2021-3611
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-06-09 17:10:50 +08:00
openeuler-ci-bot
5fcb2de04b
!581 fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-31 02:26:01 +00:00
yezengruan
ba8cdf7ac0
fix CVE-2021-3507 and fix -acpitable regression (openeuler !300!301)
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-05-31 09:17:56 +08:00
openeuler-ci-bot
accd81d09e
!566 增加system-aarch64 system-arm system-x86_64包生成
...
From: @saarloos
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-30 13:03:32 +00:00
saarloos
666acae1c3
add qemu-system-x86_64 qemu-system-arm qemu-system-aarch64 rpm
2022-05-30 14:39:26 +08:00
openeuler-ci-bot
9a3434c7e7
!574 spec中删除不需要的依赖包
...
From: @junyang-suse
Reviewed-by: @yezengruan, @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-30 01:19:41 +00:00
Jun Yang
d9686f6f3e
qemu: remove unnecessary dependency of kernel package
...
Signed-off-by: Jun Yang <jun.yang@suse.com>
2022-05-26 19:20:58 +08:00
openeuler-ci-bot
5fd6f62213
!571 fix CVE-2021-3750 (openeuler !293 )
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-23 12:38:52 +00:00
yezengruan
b39643dc6e
fix CVE-2021-3750 (openeuler !293 )
...
hw/intc/arm_gicv3: Check for !MEMTX_OK instead of MEMTX_ERROR (CVE-2021-3750)
softmmu/physmem: Simplify flatview_write and address_space_access_valid
softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR
2022-05-21 14:45:11 +08:00
openeuler-ci-bot
74c6c057fa
!553 fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287 )
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-11 09:01:05 +00:00
yezengruan
dec7c9d2cf
fix CVE-2021-4207 and CVE-2021-4206 (openeuler !287 )
...
display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207)
ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206)
2022-05-10 21:27:52 +08:00
openeuler-ci-bot
17d220f656
!549 spec文件changelog格式更新
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-05-05 07:31:16 +00:00
yezengruan
af63dcf8b2
update changelog
...
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 20:17:55 +08:00
openeuler-ci-bot
1418bdf979
!546 vfio/pci: Ascend710 change to bar2 quirk
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-04-27 06:52:16 +00:00
yezengruan
ce1ce575d6
vfio/pci: Ascend710 change to bar2 quirk
...
Change Ascend710's quirk regions to bar2 for internal causes.
And support Ascend710 2P format now.
Signed-off-by: Wu Binfeng <wubinfeng@huawei.com>
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-27 10:04:21 +08:00
openeuler-ci-bot
db5b94ea78
!542 fix CVE-2022-26354 and CVE-2022-26353
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-04-16 01:17:40 +00:00
yezengruan
b07ad26dc2
fix CVE-2022-26354 and CVE-2022-26353
...
vhost-vsock: detach the virqueue element in case of error (CVE-2022-26354)
virtio-net: fix map leaking on error during receive (CVE-2022-26353)
Signed-off-by: yezengruan <yezengruan@huawei.com>
2022-04-15 17:26:10 +08:00
openeuler-ci-bot
82c2908da2
!524 sync from branch 22.03-LTS with !505!512!523
...
From: @yezengruan
Reviewed-by: @kevinzhu1
Signed-off-by: @kevinzhu1
2022-04-06 02:23:24 +00:00