Commit - rpms/qemu - e733fb618f735409bac6e1ed19b872e6ff7aed2c

    CVE-2018-19364: 9pfs: use-after-free (bz #1651359)
    
    CVE-2018-19489: 9pfs: use-after-free renaming files (bz #1653157)
    CVE-2018-16867: usb-mtp: path traversal issue (bz #1656746)
    CVE-2018-20123: pvrdma: memory leakage in device hotplug (bz #1658964)
    CVE-2018-16872: usb-mtp: path traversal issue (bz #1659150)
    CVE-2018-20191: pvrdma: uar_read leads to NULL deref (bz #1660315)
    CVE-2019-6778: slirp: heap buffer overflow (bz #1669072)
    CVE-2019-3812: Out-of-bounds read in hw/i2c/i2c-ddc.c allows for memory disclosure (bz #1678081)

Build failed
failure

Built as qemu-2:3.0.0-4.fc29
5 years ago
Build completed
success

Built as qemu-2:3.0.0-4.fc29
5 years ago

0013-Remove-problematic-evdev-86-key-from-en-us-keymap.patch ~~0001-Remove-problematic-evdev-86-key-from-en-us-keymap.patch~~

file renamed

0014-9p-write-lock-path-in-v9fs_co_open2.patch

file added

+42

0015-9p-take-write-lock-on-fid-path-updates-CVE-2018-1936.patch

file added

+106

0016-9p-fix-QEMU-crash-when-renaming-files.patch

file added

+74

0017-usb-mtp-fix-utf16_to_str.patch

file added

+77

0018-usb-mtp-outlaw-slashes-in-filenames.patch

file added

+37

0019-pvrdma-release-device-resources-in-case-of-an-error.patch

file added

+39

0020-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXEC.patch

file added

+77

0021-pvrdma-add-uar_read-routine.patch

file added

+39

0022-slirp-check-data-length-while-emulating-ident-functi.patch

file added

+32

0023-i2c-ddc-fix-oob-read.patch

file added

+30

qemu.spec

file modified

+33 -4

rpms / qemu

Source Code

e733fb6 CVE-2018-19364: 9pfs: use-after-free (bz #1651359)

Authored and Committed by crobinso 5 years ago

`e733fb6` CVE-2018-19364: 9pfs: use-after-free (bz #1651359)