mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-05-09 17:39:31 +00:00
Code Issues Projects Releases Wiki Activity
Files
d0429def9e227ef70e97739c33387c88a70b2bde
poky/meta/recipes-devtools
T
History
Vijay Anusuri d0429def9e qemu: Backport fix for CVE-2024-4467 
A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2024-4467

Upstream commits:
https://gitlab.com/qemu-project/qemu/-/commit/bd385a5298d7062668e804d73944d52aec9549f1
https://gitlab.com/qemu-project/qemu/-/commit/2eb42a728d27a43fdcad5f37d3f65706ce6deba5
https://gitlab.com/qemu-project/qemu/-/commit/7e1110664ecbc4826f3c978ccb06b6c1bce823e6
https://gitlab.com/qemu-project/qemu/-/commit/83930780325b144a5908c45b3957b9b6457b3831
https://gitlab.com/qemu-project/qemu/-/commit/7ead946998610657d38d1a505d5f25300d4ca613

(From OE-Core rev: c23ad8c89c3dd5b6004677cd0b534e22a293134d)

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2024-09-16 06:09:56 -07:00
..
apt
apt: add missing <cstdint> for uint16_t
2023-10-18 05:13:24 -10:00
autoconf
autoconf: Update K & R stype functions
2022-09-16 17:53:22 +01:00
autoconf-archive
…
automake
automake: fix buildtest patch
2023-08-26 04:24:02 -10:00
binutils
binutils: Rename CVE-2022-38126 patch to CVE-2022-35205
2024-05-29 05:24:08 -07:00
bison
…
bootchart2
bootchart2: Fix usrmerge support
2023-02-15 21:46:56 +00:00
btrfs-tools
btrfs-tools: upgrade 5.16 -> 5.16.2
2022-03-04 17:14:15 +00:00
cargo
rust-common: Drop LLVM_TARGET and simplify
2022-06-07 11:53:26 +01:00
ccache
ccache: fix build with gcc-13
2023-10-05 15:48:49 -10:00
cdrtools
…
chrpath
…
cmake
cmake: Unset CMAKE_CXX_IMPLICIT_INCLUDE_DIRECTORIES
2024-02-28 03:32:09 -10:00
createrepo-c
createrepo-c: upgrade 0.18.0 -> 0.19.0
2022-03-16 10:31:40 +00:00
dejagnu
…
desktop-file-utils
…
devel-config
…
diffstat
…
distcc
…
dmidecode
dmidecode: fixup for CVE-2023-30630
2023-08-19 05:56:58 -10:00
dnf
dnf: upgrade 4.10.0 -> 4.11.1
2022-03-16 10:31:40 +00:00
docbook-xml
…
dosfstools
…
dpkg
dpkg: fix CVE-2022-1664
2022-08-01 16:27:29 +01:00
dwarfsrcfiles
…
e2fsprogs
e2fsprogs: fix ptest bug for second running
2023-06-21 04:00:58 -10:00
elfutils
elfutils: Disable stringop-overflow warning for build host
2024-01-04 05:00:13 -10:00
erofs-utils
erofs-utils: Use __SANE_USERSPACE_TYPES__ on ppc64
2022-03-15 08:40:09 +00:00
expect
expect: modify fixline1 script
2022-03-16 13:39:12 +00:00
fdisk
…
file
file: fix CVE-2022-48554
2023-09-08 16:09:41 -10:00
flex
…
gcc
gcc-runtime: remove bashism
2024-08-05 06:02:01 -07:00
gdb
gdb: Fix CVE-2023-39130
2024-02-09 03:46:50 -10:00
git
git: Fix multiple CVEs
2024-06-01 19:07:52 -07:00
glide
…
gnu-config
gnu-config: update SRC_URI
2022-03-24 17:45:29 +00:00
go
go: fix CVE-2024-24791
2024-08-16 08:09:14 -07:00
help2man
…
i2c-tools
…
icecc-create-env
…
icecc-toolchain
…
intltool
…
jquery
…
json-c
json-c: define CVE_VERSION
2023-10-05 15:48:49 -10:00
libcomps
…
libdnf
libdnf: resolve cstdint inclusion for newer gcc versions
2023-09-08 16:09:42 -10:00
libedit
…
libmodulemd
…
librepo
librepo: upgrade 1.14.2 -> 1.14.3
2022-05-25 22:45:50 +01:00
libtool
libtool: Upgrade 2.4.6 -> 2.4.7
2022-03-23 12:13:49 +00:00
llvm
llvm: Fix CVE-2024-31852
2024-08-05 06:02:01 -07:00
log4cplus
log4cplus: upgrade 2.0.7 -> 2.0.8
2022-08-04 16:29:15 +01:00
lua
lua: Fix install conflict when enable multilib.
2023-03-20 17:20:44 +00:00
m4
m4: Fix build on musl/ppc
2022-03-11 06:56:01 +00:00
make
…
makedevs
makedevs: Don't use COPYING.patch just to add license file into ${S}
2022-06-11 10:06:13 +01:00
meson
meson: Fix wrapper handling of implicit setup command
2023-03-20 17:20:44 +00:00
mmc
mmc-utils: upgrade to latest revision
2022-05-25 22:45:50 +01:00
mtd
mtd-utils: upgrade 2.1.4 -> 2.1.5
2022-12-01 19:35:05 +00:00
mtools
mtools: upgrade 4.0.37 -> 4.0.38
2022-03-20 00:02:22 +00:00
nasm
nasm: fix CVE-2020-21528
2023-09-08 16:09:41 -10:00
ninja
ninja: ignore CVE-2021-4336, wrong ninja
2023-07-01 08:37:24 -10:00
opkg
opkg: Set correct info_dir and status_file in opkg.conf
2022-12-13 15:23:34 +00:00
opkg-utils
opkg-utils: use a git clone, not a dynamic snapshot
2022-11-09 17:42:08 +00:00
orc
orc: upgrade 0.4.32 -> 0.4.39
2024-08-16 08:09:14 -07:00
patch
…
patchelf
patchelf: replace a rejected patch with an equivalent uninative.bbclass tweak
2023-04-11 11:31:52 +01:00
perl
perl: ignore CVE-2023-47100
2024-04-19 04:50:38 -07:00
perl-cross
perl: update 5.34.1 -> 5.34.3
2023-12-22 16:36:55 -10:00
pkgconf
pkgconf: fix CVE-2023-24056
2023-03-23 22:45:33 +00:00
pkgconfig
…
pseudo
pseudo: Fix to work with glibc 2.38
2023-09-23 05:26:15 -10:00
python
python3: fix CVE-2023-27043
2024-09-16 06:09:56 -07:00
qemu
qemu: Backport fix for CVE-2024-4467
2024-09-16 06:09:56 -07:00
quilt
quilt: Fix merge.test race condition
2023-05-30 04:11:15 -10:00
repo
…
rpm
rpm: Remove -Wimplicit-function-declaration warnings
2022-10-11 21:56:13 +01:00
rsync
rsync: Turn on -pedantic-errors at the end of 'configure'
2023-04-11 11:31:52 +01:00
ruby
ruby: backport fix for CVE-2024-27282
2024-07-24 07:51:58 -07:00
run-postinsts
run-postinsts: Set dependency for ldconfig to avoid boot issues
2023-05-10 04:19:57 -10:00
rust
rust: add CVE_CHECK_IGNORE for CVE-2024-24576
2024-04-21 06:33:34 -07:00
squashfs-tools
squashfs-tools: correct upstream version check
2022-03-20 00:02:22 +00:00
strace
strace: Update patches/tests with upstream fixes
2023-07-12 05:11:38 -10:00
subversion
subversion: upgrade to 1.14.2
2022-05-04 13:07:33 +01:00
swig
…
syslinux
…
systemd-bootchart
…
tcf-agent
…
tcltk
tcl: skip async and event tests in run-ptest
2024-04-19 04:50:39 -07:00
unfs3
…
unifdef
…
vala
vala: Fix install conflict when enable multilib.
2023-03-20 17:20:44 +00:00
valgrind
valgrind: skip intermittently failing ptest
2024-04-21 06:33:35 -07:00
xmlto
…