Yogita Urade 30969f3e97 qemu: fix CVE-2023-42467 ...

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset
in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not
prevent s->qdev.blocksize from being 256. This stops QEMU and the guest
immediately.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-42467
https://gitlab.com/qemu-project/qemu/-/issues/1813

(From OE-Core rev: 4925ac7120605d551e1b28196b4a4dab7bc72b66)

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2023-10-11 03:54:46 -10:00

..

classes

externalsrc: fix dependency chain issues

2023-08-30 04:52:36 -10:00

classes-global

staging.bbclass: do not add extend_recipe_sysroot to prefuncs of prepare_recipe_sysroot

2023-06-14 04:14:25 -10:00

classes-recipe

kernel.bbclass: Add force flag to rm calls

2023-10-04 05:21:28 -10:00

conf

bitbake.conf: add bunzip2 in HOSTTOOLS

2023-10-04 05:21:27 -10:00

files

classes: files: Extend overlayfs-etc class

2022-09-09 12:24:43 +01:00

lib

patch.py: use --absolute-git-dir instead of --show-toplevel to retrieve gitdir

2023-10-04 05:21:27 -10:00

recipes-bsp

grub: submit determinism.patch upstream

2023-07-04 05:32:29 -10:00

recipes-connectivity

inetutils: remove obsolete cruft from do_configure

2023-10-04 05:21:28 -10:00

recipes-core

glibc: stable 2.37 branch updates.

2023-10-05 14:19:57 -10:00

recipes-devtools

qemu: fix CVE-2023-42467

2023-10-11 03:54:46 -10:00

recipes-extended

mdadm: skip running 04update-uuid and 07revert-inplace testcases

2023-09-04 04:13:25 -10:00

recipes-gnome

gtk4: upgrade 4.10.4 -> 4.10.5

2023-08-30 04:52:35 -10:00

recipes-graphics

pixman: Remove duplication of license MIT

2023-09-04 04:13:25 -10:00

recipes-kernel

linux-firmware: add firmware files for NXP BT chipsets

2023-10-04 05:21:27 -10:00

recipes-multimedia

libwebp: Fix CVE-2023-5129

2023-10-04 05:21:26 -10:00

recipes-rt

recipes: Default to https git protocol where possible

2023-05-18 04:29:33 -10:00

recipes-sato

webkitgtk: fix CVE-2023-32435

2023-09-13 06:21:25 -10:00

recipes-support

curl: Add CVE-2023-28320 follow-up fix

2023-09-29 04:33:43 -10:00

site

site: remove glib site values

2023-02-19 07:47:53 +00:00

COPYING.MIT

Add missing licence files (COPYING.MIT)

2006-07-23 13:52:32 +00:00

recipes.txt

Remove LSB support

2019-08-29 14:05:12 +01:00